MurphyA/hacker-news huggingface dataset:
by jchw | 2026-01-19 15:30:02+00:00
> If your K8s cluster (or etcd) shits the bed, everything dies.

When etcd and/or kubelet shits the bed, it shouldn't do anything other than halt scheduling tasks. The actual runtime might vary between setups, but typically containerd is the one actually handling the individual pod processes.

Of course, you can also run Kubernetes pods in a VM if you want to, there have always been a few different options for this. I think right now the leading option is Kata Containers.

Does using Kata Containers improve isolation? Very likely: you have an entire guest kernel for each domain. Of course, the entire isolation domain is subject to hardware bugs, but I think people do generally regard hardware security boundaries somewhat higher than Linux kernel security boundaries.

But, does using Kata Containers improve reliability? I'd bet not, no. In theory it would help mitigate reliability issues caused by kernel bugs, but frankly that's a bit contrived as most of us never or extremely infrequently experience the type of bug that mitigates. In practice, what happens is that the point of failure switches from being a container runtime like containerd to a VMM like qemu or Firecracker.

> The equivalent to that for VMs is the hypervisor dying, but IME it’s far more likely that K8s or etcd has an issue than a hypervisor. If nothing else, the latter as a general rule is much older, much more mature, and has had more time to work out bugs.

The way I see it, mature code is less likely to have surprise showstopper bugs. However, if we're talking qemu + KVM, that's a code base that is also rather old, old enough that it comes from a very different time and place for security practices. I'm not saying qemu is bad, obviously it isn't, but I do believe that many working in high-assurance environments have decided that qemu's age and attack surface is large enough to have become a liability, hence why Firecracker and Cloud Hypervisor exist.

I think the main advantage of a VMM remains the isolation of having an entire separate guest kernel. Though, you don't need an entire Linux VM with complete PC emulation to get that; micro VMs with minimal PC emulation (mostly paravirtualization) will suffice, or possibly even something entirely different, like the way gVisor is a VMM but the "guest kernel" is entirely userland and entirely memory safe.
by loorke | 2026-01-19 15:30:27+00:00
It amuses me to read all these delusional comments on a biased misleading article written by a lobbying NGO which is funded by Soros, Omidyar and a bunch of other American billionaires. What's especially funny is that silly commentators are whining about EU getting lobbied by American corporations when the very same commission is actually being lobbied by US entities exporting "progressive views" overseas, instead of applying them in the homeland (this very same article as an example). As the result, while the US, where lobbying is prohibited by FARA btw, is going forward with both IT and more traditional industries, the EU is lagging behind from all these idiotic regulations that are harming European startups first, clearing the way for rich American corporations which have enough capital and lawyers to comply with all this mess.

Your idol Noam Chomsky once said in one of the interviews that most of the intellectuals and activists are intellectual herd whose opinion swing with the main party line, in general. This is the feeling I get from reading these comments.
by hnlmorg | 2026-01-19 15:30:33+00:00
Whilst I agree with your point, I think what sometimes gets lost in these conversations is that reviewing code thoroughly is harder than writing code.

Personally, and I’m not trying to speak for everyone here, I found it took me just as long to review AI output as it would have taken to write that code myself.

There have been some exceptions to that rule. But those exceptions have generally been in domains I’m unfamiliar with. So we are back to trusting AI as a research assistant, if not a “vibe coding” assistant.
by matwood | 2026-01-19 15:30:45+00:00
> Writing code is one means among many for achieving an outcome, and if the same outcome could be achieved by the business without software, the software would be dropped instantly. Not because care doesn’t matter, but because the purpose was never the code itself.

Early in my career I was called in a number of times to write software for some business process. Many times after talking to the users and understanding the process, I would recommend against any software. It wasn't needed, or the time could be spent in better ways (AI is likely changing that calculation though). IIRC, my title was even 'Solutions Provider' or some such. I love writing software, but it's always been a means to an end for me.
by hmaxwell | 2026-01-19 15:30:50+00:00
I feel like people who can't get AI to write production ready code are really bad at describing what they want done. The problem is that people want an LLM to one shot GTA6. When the average software developer prompts an LLM they expect 1) absolutely safe code 2) optimized/performant code 3) production ready code without even putting the requirements on credential/session handling.

You need to prompt it like it's an idiot, you need to be the architect and the person to lead the LLM into writing performant and safe code. You can't expect it to turn key one shot everything. LLMs are not at the point yet.
by michaelermer | 2026-01-19 15:31:20+00:00
This is crazy, friends told me apple was good on this, before we had to get a phone for our self, I now think they simply don't understand whats happening. It looks fine to non-tech parents i guess.
The question is, what can be used as an alternative?
I had first tried an old Android phone, but theres no way to disable app store, so kid figured out he can watch app store videos with no limit...
by bombcar | 2026-01-19 15:31:31+00:00
Commingling really only makes sense in a weird world where Amazon is the final retailer for various distributors selling the same exact product in which case why doesn’t Amazon cut out the middle men and buy it directly?

Commingling ten distributors sets of Energizer batteries makes sense, but not as much sense as just buying direct from Energizer. They don’t lake the volume.
by throw0101d | 2026-01-19 15:31:32+00:00
> DFW, Neal Stephenson, and Idiocracy seemed funny 25 years ago. Not so much now that they seem to have predicted where we have arrived.

Idiocracy did not predict things accurately: in that movie the President acknowledges that he does not have all the answers and asks questions (and listens) to people he recognizes as knowing more from him. That is not the situation currently.
by dathinab | 2026-01-19 15:31:51+00:00
or by being ostracized for drinking Cola (Coca Cola has bound it's brand tightly to the US image, which was grate for them after WW2, but is pretty bad for them now that Trump is very reliably destroying the US image).

or by most people agreeing Cola isn't healthy, so it's becomes a Luxus product they just sometimes drink and then going for a slightly more "interesting" alternative brand which fit's more the "fancy treat" vibe is pretty common (we already have been seeing this in part of Germany, where it's not rare that restaurants serve Fritz or Afro Cola over Coca Cola as the Brands "seem" more fancy while Coca Cola feels more like the cheaper non fancy choice. By being relative cheap Coca Cola might have opened created the perfect basis for it being replaced in the "fancy" context. And by it not being cheap enough it get replaced in the "people with no money" context. This leads the "in between" context (which would still be a majority in Germany) and all the US food chains etc. but only if the people don't have a personal reason to switch. Most people in Germany drink Cola only from time to time.
by NitpickLawyer | 2026-01-19 15:32:40+00:00
> Does this even make sense? Are the copyright laws so bad that a statement like this would actually be in NVIDIA’s favor?

It makes some sense, yeah. There's also precedent, in google scanning massive amounts of books, but not reproducing them. Most of our current copyright laws deal with reproductions. That's a no-no. It gets murky on the rest. Nvda's argument here is that they're not reproducing the works, they're not providing the works for other people, they're "scanning the books and computing some statistics over the entire set". Kinda similar to Google. Kinda not.

I don't see how they get around "procuring them" from 3rd party dubious sources, but oh well. The only certain thing is that our current laws didn't cover this, and probably now it's too late.
by xmodem | 2026-01-19 15:33:33+00:00
No.

A lot of devs delayed their launches:

https://www.gamespot.com/articles/silksong-release-date-has-...

Those that didn't or couldn't think it hurt them pretty badly:

https://www.dexerto.com/gaming/hell-is-us-boss-slams-silkson...

In general I think you are probably right. But there are definitely exceptions and this is one of them.
by oidar | 2026-01-19 15:33:47+00:00
Something similar happened to a physician friend of mine who was working on an note writing and research app that didn't have PMI - it used simulated/scrubbed medical data. Thankfully, only had to wait two weeks to hear from a real person at Anthropic. Getting to a real human support person should be possible, for some reason companies optimize for getting as little human interaction as possible. Thankfully, this person knew to post here and people from Anthropic work here.

Marichala - Please post back here with the outcome.
by NoMoreNicksLeft | 2026-01-19 15:33:59+00:00
>and be absolutely ruthless in permabanning anyone who posts AI content unmarked,

It would certainly be fun to trick people I dislike into posting AI content unknowingly. Maybe it has to be so low-key that they aren't even banned on the first try, but that just seems ripe for abuse.

I want a solution to this problem too, but I don't think this is reasonable or practical. I do wonder what it would mean if, philosophically, there were a way to differentiate between "free speech" and commercial speech such that one could be respected and the other regulated. But if there is such a distinction I've never been able to figure it out well enough to make the argument.
by wizzwizz4 | 2026-01-19 15:35:27+00:00
Those things are all necessary anyway, apart from the last one (communicate to users) which absent GDPR is a nice-to-have. If you don't do them, or something equivalent to them, then your processes will be wrong and you'll have breaches – and breaches of healthcare data are extremely bad. What GDPR gives you is the assurance that you won't be at a competitive disadvantage for doing the bare minimum due diligence, because your competitors are required to do so, too.

> We spent thousands of hours building systems for rights that only 0.001% of our users cared to use.

GDPR does not require that any of the data subject rights are automated, other than "right to be informed" (which it doesn't explicitly spell out has to be automated, but "put the information on the website" is the easiest way to comply if you're relying on the consent basis for anything). If you expect that under 200 people are ever going to exercise a particular right, and automation will take longer than manually fulfilling those requests, then don't automate them: just add it to your DPO's job description.

> that, in practice, the vast majority of users don't seem to care about.

You can't use "people are choosing not to waste the time of a healthcare provider" as an argument that people don't care. They may simply be being kind. I very rarely require GDPR data subject access requests, but when I do, it's very important that I can get them in a timely manner.

If I know what information is kept by the organisation (and therefore would be included in the GDPR request), and there are other ways of me accessing the information I care about having, I don't need to perform a GDPR request. It's organisations where there aren't where I'm most likely to need to make a GDPR request. If a company is actually complying with data minimisation and purpose limitation, I do not need to make a GDPR deletion request. etc etc. I think you're focusing on how annoying it is for you, and not thinking of the impact on your less-ethical competitors (who might otherwise be able to run you out of business – depending on the industry).
Show HN: Plural – Explore multiple approaches with Claude Code simultaneously
by zhubert | 2026-01-19 15:36:55+00:00
Howdy HN,

I built Plural, a TUI for running parallel Claude Code sessions. Each session lives in its own git worktree and branch and can be forked and merged at will.

The problem: When Claude suggests "you could use Redis or PostgreSQL for this," you have to pick one and wait to see if you like the approach. If you don't, you backtrack, waste context, and try again. Sequential exploration is slow.

The solution: Fork the session. Plural creates a child session for each approach, inheriting the full conversation history. You explore all paths simultaneously in separate worktrees. Merge the winner.

Key features:

• Each session = isolated git branch with automatic worktree management

• Ctrl+P detects when Claude presents numbered options and lets you fork into parallel sessions for each

• Parent-child session hierarchy visible in sidebar

• One-key merge to main, PR creation (m key)

• Import GitHub issues directly (i key) and create sessions with full context

• 8 themes, image pasting, notifications, MCP server support

Built with Go, Claude, and Bubble Tea v2. MIT licensed.

Install: brew tap zhubert/tap && brew install plural

(or with nix, compile source, etc.)

GitHub: https://github.com/zhubert/plural

Happy to answer any questions you might have!
by AnimalMuppet | 2026-01-19 15:36:59+00:00
"I have done more for NATO than any person since founding"?

And, how would Denmark protect that land from Russia or China? By being part of NATO.

And, he thinks the Prime Minister of Norway decides who gets the Nobel Peace Prize? I mean, it's chosen by a committee appointed by the Parliament of Norway, so the Prime Minister probably has some influence, but I presume it is not a direct decision.

This is the most arrogant, out-of-touch thing I have seen from Trump yet. Appalling.
by vee-kay | 2026-01-19 15:37:04+00:00
Which would be true if the Nobel Peace Prize wasn't given to Barack Obama (and never revoked despite the overwhelming evidence his actions led to more wars). Because he shamelessly went to Geneva to personally collect the Nobel Peace Prize AFTER he has signed off to start new wars from the beginning of his first tenure. In fact, Barack Obama is the only two-term US President who kept the nation officially involved throughout his tenures.

It is evident.. Barack Obama got the Nobel Peace Prize not because he was the doyen of peace (no, he was the harbinger of wars), but because he was the first Black President in the history of the United States of America.

And there are other examples where the genuineness and sincerity of the Nobel Committee can be questioned.

Ironically, Donald Trump has directly or indirectly dismantled or paused more wars than Obama started (and continued). However, to think of him as a soothsayer of peace is foolhardiness. He is deep in the pockets of the wealthy elites, and does whatever's best for them and him. He doesn't deserve the Nobel Peace Prize either.
by sib | 2026-01-19 15:37:19+00:00
There's definitely a legal & contractual difference between (1) storing the books on your servers in order to provide them to end users who have purchased licenses to read them and (2) using that same data for training a model that might be used to create books that compete with the originals. I'm pretty sure that's why GP means by "sucking up."

This is analogous the difference between Gmail using search within your mail content to find messages that you are looking for vs Gmail providing ads inside Gmail based on the content of your email (which they don't do).
by agentultra | 2026-01-19 15:37:21+00:00
Sorry for yucking into everyone's yum here but... did we miss an opportunity here as programmers to provide simpler tools for people to build simple applications for themselves?

Since when did "average" people have time to set up a CI pipeline, agents, MCPs, and all the rest needed to get vibe coded apps to work become the "simple" way for non-programmers to use computers to mush some data together for their small businesses and neighbors and stuff?

Did spreadsheets, embedded databases, and visual form builders stop working or are lacking in some way?

Or are posts like this astro-turfing LLM posts from companies selling rent to build apps for non-tech folks?

Again, apologize for sounding cynical but it's so hard telling what is genuine these days and I'm genuinely curious how farmers found the time to set up this stuff instead of just using a spreadsheet and a few macros.

If LLMs are covering a gap here maybe there's an opportunity for better, local, lower-tech tooling that doesn't require such a huge tech stack (and subscriptions/rent) to solve simple, tractable problems?
by throw0101d | 2026-01-19 15:38:17+00:00
> Right! Either scrap it, or award it only to (A) those recently deceased who have devoted their lives to making peace, or (B) defunct organizations who have completed their mission and had operated in the interests of peace.

The legal trust for all the Nobel Prizes state (AIUI) that they can only be awarded to living persons.

The only option would be to not award it (like happened in 1948).
by modeless | 2026-01-19 15:38:49+00:00
It's criminal that cell phones are bristling with incredibly advanced radio technology and yet they are by law not allowed to communicate directly with each other over a distance of more than a couple hundred meters without assistance from a licensed and centrally controlled base station. Meanwhile a $10 walkie talkie using primitive stone-age radio technology can go many miles with zero infrastructure, but by law is not allowed to be used for data transmission. This is a choice our governments have made, not something inherent to the technology.
by NoMoreNicksLeft | 2026-01-19 15:38:53+00:00
"Eventually" does alot of heavy lifting in your prediction. This is like saying that if you feed poison to panda bears, they will eventually become immune to poison. On what timescale though? 8 million years from now, if the species survived, and if I've been feeding that poison to each and every generation... sure.

If I just feed it to 10 pandas, today, they're all dead.

And I suspect that humanity's position in this analogy is far closer to the latter than the former.
by NitpickLawyer | 2026-01-19 15:39:22+00:00
> I prefer the more deterministic behavior of MCP for complex multi-step tasks, and the fact that I can do it effectively using smaller, cheaper models is just icing on the cake.

Yeah, that makes sense. That's not what the person that I replied was talking about, tho. Skills work fine for "loading context pertinent to one type of task", such as working on a feature without "forgetting" what was done in the previous session.

The article deals with specific, somewhat predefined workflows.
by elzbardico | 2026-01-19 15:39:46+00:00
I sometimes wonder if we couldn't have completely different public internet topologies if

a) Wireless local networking was invented and popularized earlier
b) We had transitioned earlier to IPV6 or some other protocol with an address space as huge, thus making NAT not as pervasive as it became.
b) We didn't have hordes of VCs financing walled gardens and social networks.
by hnlmorg | 2026-01-19 15:40:00+00:00
I think the GP is correct.

You can get some of the way writing prompts with very little effort. But you almost always hit problems after a while. And once you do, it feels almost impossible to recover without restarting from a new context. And that can sometimes be a painful step.

But with learning to write effective prompts will get you a lot further, a lot quicker and with less friction.

So there’s definitely an element of learning a “prompt-lang” to effective use of LLMs.
by MrPowerGamerBR | 2026-01-19 15:40:07+00:00
Because I really want to be proved wrong, I tried using the patch creator's pre-compiled build with umu-launcher. However I couldn't get it work because umu-launcher kept complaining about a missing container runtime after I set the PROTONPATH to the pre-compiled build. It also did not work with umu's default Proton fork (it did run something, but even after I tried starting winecfg with umu, it just didn't do anything)

This is probably a skill issue on my part, so someone smarter than me could try getting it to work.

Because after using umu it sets up all of the override DLLs on my Wine prefix, I've tried running the Wine build directly, and I must say that the Photoshop GUI DOES render way better here, however the activation screen is still a empty white box (sometimes it does show "Loading..." in the box): https://i.imgur.com/Jxnga5W.png

But when doing this, the Creative Cloud app does not work anymore, it says that it needs to be repaired, but it fails to be repaired. https://i.imgur.com/jdQeU4t.png

This is very scuffed, maybe I should try Lutris and see what happens

Again, I really want to be proven wrong and it would be amazing if someone that ACTUALLY made it work with a PAID Creative Cloud license and used Photoshop CC 2021 WITHOUT bypassing its activation shows up and says "hey look, I got it to work and you are just stupid".
by Kapura | 2026-01-19 15:40:18+00:00
There was never any money in making tools that allow people to make their own applications. There is only money in walling people into your garden, forcing them to use all of the decaying or enshittified tools in your ecosystem.

There actually still isn't any money in LLM, but we're in the "cheap ubers" era where everything is subsidized by capital that has congealed thanks to economic deregulation in the 80s. Yay, capitalism.
by embedding-shape | 2026-01-19 15:40:24+00:00
> to the point you can "just" boot and install Linux (as mentioned in the article) on it to get a headless server running in minutes.

This is basically what I've been waiting on. Besides the mentioned Milk-V Titan, what are some other good boards people here tried out and could vouch for being good? Ideally European, but happy to receive any recommendations as long as you've actually tried it yourself :)
by xinayder | 2026-01-19 15:40:32+00:00
> How is it their right to make that decision?

It's their game, it's written in the EULA, which everyone accepts blindly without reading. You have accepted the EULA before playing the game.

This is the same as the Steam Subscriber Agreement saying you CANNOT make paid mods using Valve's IP unless given permission to do so.

There's nothing wrong with CDPR going after someone who thought they'd get away by making an important mod paid-only. It's a totally different story if the $10 fee was optional.
by ipython | 2026-01-19 15:41:01+00:00
I guess I don't understand why anyone thinks giving an LLM access to credentials is a good idea in the first place? It's been demonstrated best practice to separate authentication/authorization from the LLM's context window/ability to influence for several years now.

We spent the last 50 years of computer security getting to a point where we keep sensitive credentials out of the hands of humans. I guess now we have to take the next 50 years to learn the lesson that we should keep those same credentials out of the hands of LLMs as well?

I'll be sitting on the sideline eating popcorn in that case.