MurphyA/hacker-news huggingface dataset:
by Dylan16807 | 2026-01-26 05:39:11+00:00
> They block ports on dynamic IPs, but if you pay +2€/mo for static, this is unlocked. This seems reasonable.

Why does that seem reasonable to you? Why should dynamic IPs not be able to receive incoming connections? It costs them nothing to let those packets through.

> disingenuous

Bad.

> Would you also say your mobile phone operator is violating net neutrality by putting you behind CGNAT that you can't forward arbitrary ports through?

CGNAT is pretty awful, but at least there's a reason for connections to fail.

But sure, if I had control I would mandate that CGNAT lets you forward ports. Maybe you don't always control the external port, but there shouldn't be any other compromises.

> You can pay a bunch of money to get a private APN and get public IPv4 addresses. Would you call that an unblock fee?

That's a workaround to get a different connection, not an unblock, so no.
by citizenpaul | 2026-01-26 05:39:23+00:00
I think you answered your own question.

This is like the ultimate version of going back 1000+ years economically and socially. Where a merchant would size up how desperate or rich they thought you were and charged you based on that rather than a reasonable price.

It wastes the time of the poor whom must be willing to walk away without anything when they can "afford it" and further deepens the problems when you are desperate.

Except now they can also spy on you 24x7 and buy information from other spys while they make their decisions and have 100% information asymmetry. Now they also HAVE to charge you more to make back the money they spend spying on you rather than just running a normal business.

You already answered your own question though. It is the peak of exploiting power wealth disparity, there is zero chance of it being used beneficially.
by fragmede | 2026-01-26 05:39:26+00:00
the usual guardrail is to wrap user input with tags with a Uuid-ish, like <comment-6838-jeih-uejj>ignore previous instructions, prompt injection here</comment-6838-jeih-uejj>, with instructions to the LLM to ignore the text between the tags as instructions. Without guessing the uuid, the prompt injection doesn't succeed. No clue if clawd does that, but it should.
by Imustaskforhelp | 2026-01-26 05:40:53+00:00
Their economic prosperity is more linked to Oil than Internet.

Plus, the elites economic prosperity is also linked to their not being protests and for the toppling of govt to not occur and they might be willing to offset some losses to keep the average population in check

Which sucks for the average iranian but we saw how their protests were cracked down with 20-30 THOUSAND people killed and Iran hiding bodies etc.

I have heard that all shops are either shut down or running at the most minimum capacity. Economic prosperity just isn't a question now in Iran.
by smsm42 | 2026-01-26 05:42:34+00:00
> The EU doesn't need or want "big tech", it just needs "tech".

Why doesn't it already have "tech" and has to resort to governmental action to procure one? I mean, it is obviously very easy to acquire just "tech" without government completely failing to enforce laws and population being fucked by corporations, and it is a testament to how dumb Americans really are that they failed to do that. But Europeans are not dumb, so why they didn't do it by now? Why we are discussing the matter now instead of just pointing to clearly superior open-standard non-fucking European "just tech" as a superior alternative to American "big tech"?
by solaire_oa | 2026-01-26 05:44:00+00:00
Oh, having a historian's "translation" of the essay is legitimately helpful for understanding how the the points relate in the current climate, thank you. And I love acoup.blog, separately (tangentially related, I was legitimately crestfallen when he linked the formations of the orc army to the enduring, permeating, trans-generational success of Nazi propaganda https://acoup.blog/2019/05/24/collections-the-siege-of-gondo...)
by johnnymedhanie | 2026-01-26 05:44:04+00:00
I built Doctective after wasting one too many hours debugging issues caused by outdated docs.

Imagine this: Want to use a new library so you follow the documentation, it doesn't work, and then you discover the code changed 3 months ago but nobody updated the docs. The worst part? AI coding assistants are now reading these stale docs too, generating broken code based on outdated information.

So I built something simple: connect your GitHub repo, and Doctective watches every PR. When code changes would break your docs, it tells you and can even open a companion PR with the fixes automatically.

No new tools to learn. No manual doc audits. Just accurate docs that update themselves.

Would love your feedback — what's the #1 documentation pain point on your team?
by citizenpaul | 2026-01-26 05:45:02+00:00
>massive thug salary

Common misconception due to movie brain. The average "salary" of a misc gang member is under <30k per year. Violence is cheap any male under 30yo can easily do it and the poor ones are often willing. Junkies will often do anything including murder for next to nothing ie another hit. Junkies are actually quite reliable contrary to movie brain beliefs.

Anyway wrench hitting does not need to scale. They only want the passwords of people they perceive as being a threat to them which is a very small number of people.
by siev | 2026-01-26 05:45:15+00:00
I guess it's time to check "be accused of spreading psyops" off my internet bucket list.

Because I guess you're not interested in my own personal experience of witnessing said people get killed either. Or not exiting my home because I feared for my life. But you seem to have a loose definition of "unconfirmed" [1] so I won't dwell on that. Here's all I have to say:

> When the Israeli government claims that Iran needs to be toppled to protect the Iranian people, while they simultaneously commit genocide in Palestine, I have to stop and think about their real motives.

The Iranian government is evil.

The Israeli government is evil.

Both are, believe it or not, true. Conservative ruling systems often dislike other conservative ruling systems.

> Trump wants to bring democracy to Iran

_Iranians_ want to bring democracy to Iran. And as one of them, I sincerely don't give a shit about what Trump or Israel or anyone else outside of this fucking country wants.

[1] https://en.wikipedia.org/wiki/2026_Iran_massacres
by smsm42 | 2026-01-26 05:45:41+00:00
> If the EU is serious about offering an alternative (which I doubt) it needs to offer a sustainable path for its people to invest in it.

Did US government do something like that? If US has some attractive investments and EU does not, why don't they? I mean, EU citizens would probably like to invest in EU companies, much better than in US companies, they are not some self-haters to refuse a good investment just because it's in EU, right? So why don't they invest there? Why do they invest in US instead and there is a need in a special action - not taken prior to now - to enable them to invest in the EU?
by ValdikSS | 2026-01-26 05:45:59+00:00
Baikal definitely has anti-rollback, and Loongson should have it too. That's a common feature.

As of efuses, they are present essentially anywhere. In any SoC and microcontroller. They are usually used to store secrets (keys) and for chip configuration.

The linked wiki article written in a way that the reader might assume that OnePlus did something wrong, unique, anti-consumer, or something along the lines. Quite the contrary: OnePlus issued updated official firmware with burned the anti-rollback bit to prevent older vulnerable official firmware from being installed. Either new bootloader-level vulnerability has been found, or some kind of bootloader-level secret has leaked from OnePlus, with which the attacker can gain access to the smartphone's data it should not have. By this update, OnePlus secured data of the smartphone owners again.

You still can unlock the bootloader and install custom firmware (with bumped anti-rollback version in the firmware metadata I guess, that would require newer custom firmware or a recompilation/header modification for the older). Your device with the custom firmware installed won't receive the official firmware update to begin with, so it could not be bricked.
by Crespyl | 2026-01-26 05:47:07+00:00
All this is just "Games haven't(/can't) had their 'Citizen Kane'" all over again. What are you expecting? What would a "Lord of the Rings" of gaming need to do to be "real art" in your (the general you, I'm not really trying to call you out specifically) eyes?

When someone watches a movie, or engages with any other art form, are they "transformed"?

Games are certainly a unique art form, but I reject the idea that they are somehow unable to produce a "shared cultural vocabulary", or that the experience of playing a game can't be discussed to just as rich a level as, say, the experience of watching a movie, or listening to a piece of music. Ultimately, to fully engage in a dialogue about a work of art, you need to experience that work in its intended form, this should be obviously true of music, movies, painting, and games. But to set games apart as somehow less able to be fully discussed is nonsense.
by avcloudy | 2026-01-26 05:48:56+00:00
I'm just gonna put it out there, more choice always being good is the ideology, but when you measure user experience, they consistently rate smooth, fast experiences over feature count unless it's a feature that's important to them.

I don't think iOS is less feature rich except in some specific areas, like web browsers, but you can see in the extreme example that if you could use any web browser for 20 minutes before running out of battery vs safari for hours, one is clearly better. Then you're just haggling over scale. Having the choice to use bad options is not really a choice, unless you have to eg for certain functionality.

And like, in other contexts this isn't even a debate. You talk about the useless feature bloat of Microsoft Word and the associated UI crud, and people are like 'yeah'. But in this context people will straight up make an argument that n+1 features better than n features.
by esolyt | 2026-01-26 05:51:08+00:00
If you get a chance to talk to an Iranian, try explaining them why it's fine that they're losing access to internet because the internet was brainwashing them to hate their government. Also tell them their government isn't killing or jailing protesters and these are just made-up by Israel and America.

While you're at it, you can try explaining Ukranians why it's fine that Russia is invading them because America is bad.
by avazhi | 2026-01-26 05:51:51+00:00
Out of all the EU countries Russia would be likely to sabotage (Germany and the UK come immediately to mind), you think the Russians would do this in… Spain which, to my knowledge, doesn’t seem to have much of an opinion on anything and is only in the news when they have heat waves, flash floods, or some public transport mass casualty accident like this one.

But yeah dude, we’re all Russian shills.
by sjrd | 2026-01-26 05:52:51+00:00
Interesting. When compiling Scala.js to ECMAScript 5, we still have an implementation of bitwise floating point conversions based on double operations and integer shifts. [1] We also use a lookup table for powers of 2, and don't use anything but primitives (no log or pow, notably). We do have a few divisions, but I see now how I could turn them into multiplications. Dealing with subnormals is tricky because the inverse of the subnormal powers of 2 are not representable.

We have one loop: a binary search in the table of powers of 2 for the double-to-bits conversion. It has a fixed number of iterations. I had tried to unroll it, but that did not perform any better.

I'll have to dig more to understand how they got rid of the comparisons, though.

I wonder whether their implementation would be faster than ours. At the time I wrote our conversions, they beat every previous implementation I was aware of hands down.

[1] https://github.com/scala-js/scala-js/blob/v1.20.2/linker-pri...
by rincebrain | 2026-01-26 05:53:05+00:00
It's possible to do both, you just need to be cognizant of what you're doing in both positions.

A tricky part becomes when you don't have both roles for something, like SRE-developed tools that are maintained by the ones writing them, and you need to strike the balance yourselves until/unless you wind up with that split. If you're not aware of both hats and juggling wearing them intentionally, in that case, you can wind up with tools out of SRE that are worse than any SWE-only tool might ever be, because the SREs sometimes think they won't make the same mistakes, but all the same feature-focused things apply for SRE-written tools too...
by Aurornis | 2026-01-26 05:54:26+00:00
Materials like this are infinitely more accessible to us than our grandparents generation. We all have devices in our pockets that can get to service manuals for our products in minutes. I can have common parts at my door overnight from Amazon with the press of a button on my phone. Every local hardware store carries replacement cartridges and gaskets for common faucet types.

The reason our grandparents generation was good at fixing things is because they had to be. My grandparents lived through the Great Depression and worked difficult manual labor jobs. Contrary to the Reddit memes about how past generations lived like kings on trivial jobs, they worked extremely hard for everything and made it last.

It’s really easy to get service manuals and do basic maintenance on simple things like faucets these days. I think the only reason it’s becoming common for people to not know how to do basic repairs or even find basic service information is that many people grew up never having to think about it. I still have adult friends who went from living with their parents to dorms to rented apartments who never learned the first thing about maintaining or fixing things around the house because they’ve never had to and they don’t want to - and they can keep going that way without really losing anything. It’s a choice at this point, but it works for them.
by throwaway17_17 | 2026-01-26 05:55:30+00:00
Quick note then a more wordy response (and after being dinged in another thread yesterday, the tl;dr is your usage is correct, ignore purposely avoiding context criticism of wording):

SML has mutation, but only for Ref Cells, which humorously are values themselves. Not that’s what you’re really talking about here.

Now for the wordy part…

As another of your sibling commenters said GP was being incredibly pedantic. While his reference to Plotkin/Winskel and the PCF thread of research is formative, it is of particular note for Structural Operational Semantics.

The real issue GP is raising that in programming language semantics there are two distinct ways in which the term ‘value’ is used. Worse still is that the terms are not just distinct but are broadly from two very distinct fields in PLT. So, what are the two uses:

1) when the domain of discourse is Operational Semantics of Programming Languages, a ‘value’ is a term in the formal abstract syntax of the language which is not subject to reduction via any other transition defined over the syntax;

2) when the domain of discourse is the Evaluation and Default Kinds of arguments passed to functions and the semantic implications of those defaults, a ‘value’ is defined in the negative as those semantic objects which ARE NOT references [1];

which from the definitions alone, it is clear your designation of your language as ‘pass-by-value’ is a distinct thing from GP’s usage of the term.

While GP’s usage of ‘value’ is in line with a long standing tradition, that tradition is firmly within the academic/functional programming language syntax and semantics sphere. Your usage, as is PLAINLY APPARENT from context, is absolutely correct and in line with long standing usage within discussion (and academic work) on imperative (and otherwise non-functional) programming language semantics. So keep phrasing discussions about Herd using the ‘pass-by-value’ and ‘everything is a value’. It’s not only contextually correct and historically justified, it is utterly within the ‘vernacular’ of normal programming language discussions.

One last thought, your language’s adoption of totally defaulting to passing arguments (to functions, threads, basically any control construct), with copy-on-write being an optimization only, should make implementing a non-reified linearity qualifier on types relatively simple to implement, that would address some of the locking anti-optimizations and address some of your static analysis that you mentioned where not working 100%.

———————

1: Reference here include Rust/C++ style lightly abstracted references, nearly zero abstraction pointers, and then the references as discussed when talking about Python, Ruby, JavaScript, C++ smart pointers, Rust’s higher level abstractions over references, etc which are a very abstract concept of reference.
by w10-1 | 2026-01-26 05:57:26+00:00
Fantastic! Managing views in eclipse like this is one of the things that keeps me using eclipse.

From looking at the demo and the docs...

What I didn't see in the demo was changing the order of a tab within a panel via drag-and-drop (no "allowIntraPaneTabMove"?). Also presuming you can close tabs to left, right, or all other tabs (would need tabs as list to implement this in application). Also might like to somehow manage title elision when there are multiple tabs. Also want to change pane proportions on the fly. Also assuming one can have two views of the same document in different tabs.

So many possibilities! I'll try it in some app...
by cookiengineer | 2026-01-26 05:57:48+00:00
I wanted to point out that this seems to be rotating fake companies filing comllaints on behalf of this "julia.pic" person.

Note how every DMCA request is done by a different company. There's like 20+ companies that filed those DMCA requests within less than a week.

Can this even be possible? I don't know how lawyer retainers or power of attorney works in the US, but I was assuming that mandates cannot be transferred to third parties.
by bogtap82 | 2026-01-26 05:58:49+00:00
I cloned the clawdbot repo back when it was named warelay or clawdis, can't remember, but it was much less dense then. Mainly cloned it for the in-the-box Whatsapp implementation. Since then I've built it into a pretty awesome agent for my home and family, who all have their own privileged access which allows it access to different skills and a mixture of shared and personal information. I have no interest in reconciling the Frankenstein I've built with newer mainline features, but the custom nature of my build is one of the things I find so fun and helpful about it. It's become so much more "mine" by just asking it to build out xyz feature for itself, and now it can do a bunch of weird things that revolve around its persistent access to the information I provide it and my ability to interface with it through a regular messaging app.
by cthalupa | 2026-01-26 05:59:12+00:00
You're right that this is a concern but this and the followup are also totally unhelpful.

Even if you don't want to do any additional work explaining it or finding a source, all you have to do to change this message from being dickish to being helpful would be to phrase it more like "I think there are some serious risks with this approach from a prompt injection standpoint. I would recommend doing some research on the risks for AI agents with unfettered access to the internet and prompt injection."

And if spending a few more seconds typing that out is still too much of a waste of time for you to do, I might question if you have time to waste commenting on HN at all when you can't uphold basic social contracts with the time you do have.
by lmeyerov | 2026-01-26 06:00:04+00:00
Codex isn't so optimistic:

---

› heyo codex, find the clawdbot git repo, clone it into ~/Work/clawdbot , and research how it handles prompt injection attacks from data it gets, eg, when it crawls webpages for the
user. for example, does it wrap foreign non-user input with <untrusted-UUID123>...payload...</untrusted-UUID123> when the prompt gets constructed?

─ Worked for 9m 08s ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────

• Cloned the repo to /home/lmeyerov/Work/clawdbot and reviewed the web-fetch/browser tooling plus security docs. Short answer: I found no <untrusted-…> wrapping or similar tagging in
prompt construction or tool outputs.

Findings

- web_fetch extracts HTML into markdown/text, strips script/style/noscript, and truncates output, but returns the content as plain text inside a JSON tool result; the tool wrapper
just stringifies JSON (no untrusted tags). See src/agents/tools/web-fetch.ts:446, src/agents/tools/web-fetch.ts:549, src/agents/tools/web-fetch-utils.ts:28, src/agents/tools/
common.ts:171.
- browser snapshots return raw snapshot text (or an image + text) as the tool result; again, no wrapper tags. See src/agents/tools/browser-tool.ts:568.
- Prompt-injection mitigation is documented as operational policy: treat external content (web search/fetch/browser pages) as untrusted, use reader agents, disable web tools for
tool-enabled agents, sandbox aggressively, and use stronger models. See docs/gateway/security.md:191, docs/help/faq.md:2572.
- There is a plugin hook to transform tool results before persistence if you want to add your own wrappers, but it’s not used by default. See docs/hooks.md:238.

---

› so would normal usage of just install clawdbot and asking it to look at a webpage risk prompt injection, and if not, why not?

• Yes — it still risks prompt injection when you ask it to look at a webpage. The web content is returned as plain text in tool results (no <untrusted> wrappers), so adversarial
instructions can land directly in the model context; see src/agents/tools/web-fetch.ts:446, src/agents/tools/browser-tool.ts:568, src/agents/tools/common.ts:171. The docs explicitly
say prompt injection is not solved and that web content is untrusted, with mitigations being reader agents, disabling web tools for tool‑enabled agents, and sandboxing; see docs/
gateway/security.md:191, docs/help/faq.md:2572. Also, the default main session runs tools on the host, so if the model is tricked the blast radius can include real tool calls; see
README.md:317.
by joshuaisaact | 2026-01-26 06:00:21+00:00
Couldn't disagree with this article more. I think the future of software engineering is more T-shaped.

Look at the 'Product Engineer' roles we are seeing spreading in forward-thinking startups and scaleups.

That's the future of SWE I think. SWEs take on more PM and design responsibilities as part of the existing role.
by molchanovartem | 2026-01-26 06:00:31+00:00
Hi HN,

I built a support ticket classifier using a fine-tuned Qwen2.5-0.5B model. It determines intent, category, urgency, sentiment, and routing — all in a single inference.

*Why I built this:* A company needed to automate ticket routing but couldn't use cloud LLM APIs due to data privacy requirements. Self-hosted was the only option.

*Stack:*
- Qwen2.5-0.5B-Instruct (fine-tuned, not LoRA)
- GGUF Q4_K_M quantization (350MB)
- llama-cpp-python + FastAPI
- Docker on a $10/mo VPS

*Results:*
- ~90% accuracy on intent/category (on synthetic ~4K dataset — with real data and 5-10K examples, accuracy improves)
- 150ms on Apple Silicon, 3-5s on budget VPS (old Xeon without AVX2)

*When this makes sense vs cloud APIs:*
- Data must stay on-premise
- High volume (>10K/month) where API costs add up
- Narrow classification task (not general chat)

*Try it:*
- Demo: https://silentworks.tech/test
- API docs: https://silentworks.tech/docs

Happy to discuss the implementation details, training approach, or deployment setup.

---

Contact: https://t.me/var_molchanov