MurphyA/hacker-news huggingface dataset:
by bhaney | 2026-01-08 19:47:48+00:00
> The problem is hardly a resource one

Did we read the same article? It's a very obvious complaint from the author. It's not actually a problem anymore, but that's entirely my point.

> you can’t see/scroll/wrangle 2000 tabs with the current tab display UI paradigm— you can’t even see their titles

Pretty much all Chromium-based browsers have a button to display a vertical scrollable list of all open tabs (with their favicon, title, domain, and time since last access) with a filter/search bar. Firefox has a slightly less detailed version (but the same general UI pattern) of the same thing, and can be augmented with more functionality through extensions if the user desires. I swear everyone complaining about this stuff hasn't looked at a browser in years.

> Chrome state management is crap and you’ll end up losing them

I've been using and restoring the same session for many years with no issues. If I close the browser and re-open it normally, my tabs remain. If the browser crashes and restarts, I click the button that says "restore" and it all immediately comes back just fine. Again, the problem you're describing hasn't actually been a problem in many years.
by roadside_picnic | 2026-01-08 19:48:11+00:00
> a wave of elective sociopaths swoop in to flag posts and derail discussion

The biggest vulnerably of the entire social media model is the "engagement pyramid" where the number of viewers is much larger than the number of upvoters is much larger than the number of commenters.

HN gets ~5 million monthly unique visitors, or 150,000 per day (conservatively assuming each visitor only shows up once, so that number is probably much larger). But if you look the top post right now has around ~1,500 upvotes, and ~200 comments (and, if you look, comment sections frequently have single users commenting repeatedly, so less than 200 actual people commenting).

This makes it very easy and very worth it to run even loosely coordinated commenting/upvoting rings. 10 people can easily downvote a new post off the homepage, give the impression that the community disapproves of a certain opinion, disrupt conversation, etc.

What's funny is that proposing this is often treated as a claim of a wild conspiracy theory. But the weakness in most conspiracy theories is that they require high levels of coordination among similarly large groups of actors, often for little reward. In this case it's almost more outrageous to claim that this isn't happening (especially since I have personally seen teams of people coordinate to get their startups work on the front page). I suspect even 3 very coordinated people could do a lot to control the front page (or alternatively increasingly large N of increasingly less coordinated people).
by sleepybrett | 2026-01-08 19:49:19+00:00
I love my QCII earbuds, comfort and noise cancellation blow the airpodpro3's out of the water. But sadly the new hearing aid features of the airpodpros are very handy to me, so I have both. I wear the QC2's when I'm at home alone, and the app3s when I'm out and about and expect to have to have some conversations. My ears aren't so bad yet that I need hearing aids, but they are bad enough that I'm forced to lean in more than I used to. Aging is the worst.
by NickC25 | 2026-01-08 19:49:27+00:00
LinkedIn applications, applying to every PM role available in my metro area that I could, attending as many tech & startup events as I could. I got to know the main writer of the local startup/tech news aggregator pretty well and would pester him regularly for contacts at new local companies that he's talking with. I was active in my city's tech Slack/Discord community.

I do have a degree albeit on not in STEM. Also have an advanced degree (also not STEM) that helped the company I was with from 2018 until 2021.
by sowbug | 2026-01-08 19:49:41+00:00
A bit more detail: long ago, before the time of the Great Brace War, people wrote code using all sorts of styles: tabs/spaces, short or long variable/function names, Hungarian notation or not, comments or not, long blocks or short, and so on. You could often tell which of your teammates wrote a block of code simply by newline usage. This made it hard to read and contribute code in a less familiar part of the codebase.

Google mitigated this problem at scale by introducing the concept of "readability" for each language (C++, Java, and Python, simpler times). If you had readability, you could approve another person's change for that language. If you didn't, you could still review the code, but the reviewee also had to go find someone else with readability.

After you'd accumulated a certain number of commits in a language, you could try to get your own readability by bundling up your CLs (changelists) and submitting them to the readability queue, where a certain group of senior people with readability would evaluate whether your code was sufficiently idiomatic. This process could take months, or even years if you didn't write much in a particular language. In any event, it felt like a real achievement to get readability.

The upshot of all this was that most code at Google felt authorless in a good way: if you knew and expected Google style, all the codebase felt the same, and you could concentrate on the logic flow rather than the regional dialect. And needless to say all the energy wasted on whose style was best was squelched in the readability queue.

This is all past tense because I last wrote code for Google more than 10 years ago, and I'm sure the process has changed since then. Code formatters, shared editor defaults, and presubmit checks have surely automated away a lot of the toil, and there's much less of a monorepo culture these days, so there are probably more style dialects (in addition to many, many more permitted languages).
by stingraycharles | 2026-01-08 19:49:57+00:00
You're correct, but the answer is that - typically - they don't access untrusted content all that often.

The number of scenarios in which you have your coding agent retrieving random websites from the internet is very low.

What typically happens is that they use a provider's "web search" API if they need external content, which already pre-processes and summarises all content, so these types of attacks are impossible.

Don't forget: this attack relies on injecting a malicious prompt into a project's README.md that you're actively working on.
by standardly | 2026-01-08 19:50:04+00:00
I'm so tired of this Idiocracy timeline. This doesn't even read like a real headline. Sometimes I think it's unfortunate that radical, violent, far left extremists apparently stopped existing, or are in hiding. Seems like the only remaining option. Seriously, I don't condone violence or anything, it's just this feeling I'm left with of like "someone please do SOMETHING". The real threat to the administration should be we the people, not Venezuela, or Denmark, or immigrants, etc. But nobody wants to be ICEd, suicided, or disappeared. Very scary precedent.. Russia vibes
by iugtmkbdfil834 | 2026-01-08 19:50:28+00:00
The difference between us that I know exactly what ( and even why ) I advocate for: keeping the system stable.

<< random citizen

She was a not some random citizen; I would have been addressing it differently if that was the case. Now, if you have a stomach for it, we can go over what kind of citizen she was.
by martinald | 2026-01-08 19:50:30+00:00
The problem is essentially memory bandiwdth afiak. Simplifying a lot in my reply, but most NPUs (all?) do not have faster memory bandwidth than the GPU. They were originally designed when ML models were megabytes not gigabytes. They have a small amount of very fast SRAM (4MB I want to say?). LLM models _do not_ fit into 4MB of SRAM :).

And LLM inference is heavily memory bandwidth bound (reading input tokens isn't though - so it _could_ be useful for this in theory, but usually on device prompts are very short).

So if you are memory bandwidth bound anyway and the NPU doesn't provide any speedup on that front, it's going to be no faster. But has loads of other gotchas so no real "SDK" format for them.

Note the idea isn't bad per se, it has real efficiencies when you do start getting compute bound (eg doing multiple parallel batches of inference at once), this is basically what TPUs do (but with far higher memory bandwidth).
Show HN: A Free Supabase Leaks Scanner and Audits RLS in Seconds
by xyborg | 2026-01-08 19:50:53+00:00
Probably many of you, or someone you know, learned the hard way that leaked credentials and/or misconfigured RLS can quietly blow up a project. After juggling multiple secret-scanning scripts and manual policy audits, I wanted something stupid-simple: paste a URL, scan, get answers.

So I built SupaExplorer Leak Scanner.

It scans any public website for leaked Supabase project refs, anon/public keys, service role keys, storage bucket exposures, and then automatically runs an RLS policy audit on the linked Supabase instance. No database password required, no signup for scans.

What it does:

- Detects leaked Supabase credentials in HTML/JS responses, source maps, and network payloads (for this you can use the free Chrome Extension!)
- Identifies publicly exposed tables or storage buckets
- Audits RLS on the instance and checks if policies enforce user isolation

Generates a clean security report + optional SQL fixes if issues are found

It’s fully free to scan. The paid report is just there if you want instant fixes bundled, but the core tool is open for anyone to use without friction.

Would love feedback from fellow builders. I’m especially interested in edge cases I haven’t hit yet, and ideas to make the RLS audit even better.

Try it out and roast it kindly.
by alphadatavault | 2026-01-08 19:51:16+00:00
The shift from "knowledge transfer" to "judgment development" is profound. When I was young, memorizing facts mattered because you couldn't access them instantly. Now, a student asking "Why should I learn this?" when they can look it up is asking a fundamentally important question.

I think the real skill is learning to:
1. *Evaluate sources critically* - Not all information is created equal; AI has made this more important, not less
2. *Build mental models* - Understanding why something works, not just what it does
3. *Know what questions to ask* - The person who formulates the right query gets better answers than the person with perfect recall
4. *Tolerate ambiguity* - Living with multiple valid perspectives, which contradicts the "one right answer" model

The uncomfortable truth? Many traditional educational institutions haven't adapted to this yet. We're still teaching knowledge transfer when we should be teaching discernment and creativity. Parents are right to feel uncertain about what to emphasize with their kids.
by bombcar | 2026-01-08 19:51:34+00:00
I think too many people jump to the easy-to-understand "owners want to get richer" conclusion without actually engaging with what people are saying and voting for. Often the results of the voting may be related to property staying somewhat scarce, but (in my experience) the vast majority of people don't really care about the value of their house as long as it doesn't go substantially down.

Assessed value raises (and drops) shouldn't directly affect property tax assuming the whole area raises and falls (in most areas) because of how the tax is apportioned.

The reality that people don't want to deal with is that it's personal and it is slow - there is no SimCity-style bulldozing and redeveloping without pouring in tremendous amounts of money, because people like living where they do and it's hard to get them to move involuntarily.
by properbrew | 2026-01-08 19:51:51+00:00
I think it depends on how determined the actor is. I see all the range from your simple scripts to full on mimicking real user behavior that I can only really spot from the honeypots they hit.

You'd probably catch most the low hanging fruit for sure, but you would cause friction for real users.

I say this as someone who has enabled captcha on some of our more critical endpoints, there's definitely a place for it.
by neom | 2026-01-08 19:52:53+00:00
It becomes nuanced doesn't it? First thing is: to trust him fully is to understand what it means to trust him... that he knows his business well enough that he can intuitively feel things are wrong. That comes from not being checked out, so: he knows who is in his company and why, he knows the types of projects happening in his business and why, he has easy levers to gain real time information when something feels wrong, and - he monitors his business correctly. I trust Matthew because I know him, so I believe all those things are true. The final part is that trust is also about knowing that mistakes happen, and that they are being: sought out, addressed and owned. So when I say I trust him, it's because I believe everything aforementioned - it makes your scenario safe, at least to me.
by spaceman_2020 | 2026-01-08 19:52:59+00:00
If you want to actually get full and satiated with a largely vegetarian diet, you will eventually resort to carbs

And this is for a culture that really knows how to make smashingly good vegetarian dishes

I love my vegetables, but a vegetable-heavy diet is clearly not something that everyone can or should do. The people I know who retain their health with vegetarian/vegan diets are usually really well-versed in nutrition
by maxlin | 2026-01-08 19:53:01+00:00
Thought the product looks good for a prototype, but crazy as a published product.

Then found out it's a closed beta.

So ... ok? Closed beta test is doing what such a test is supposed to do. Sure, ideally the issue would have been figured out earlier, especially if this is a design issue and the parsing needs to be thought out again, but this is still reasonably inside the layers of redundancy for catching these kinds of things amicably.
by Galanwe | 2026-01-08 19:53:06+00:00
I have a "Copilot" button on my new ThinkPad. I have yet to understand what it does that necessitates a dedicated button.

On Linux it does nothing, on Windows it tells me I need an Office 365 plan to use it.

Like... What the hell... They literally placed a paywalled Windows only physical button on my laptop.

What next, an always-on screen for ads next to the trackpad?
by devilbunny | 2026-01-08 19:53:11+00:00
#3 is a reason not to use a debit card but to use credit instead. If you pay your balance in full every month, on time, then there is no interest due at all. So even after you get your bill, if the card has been used fraudulently, it's not your problem and you can't be stuck with the bill.

I was using the generic "you", not you specifically. Many people don't understand this about credit cards in the US. If an entire nation of people use something that nobody you know does, then either they are all idiots in a way that nobody you know is, or there is something that makes it uniquely valuable there. The consumer protection angle is the unique value proposition (and it covers quite a lot of things).
by dylan604 | 2026-01-08 19:53:12+00:00
Proton's full encryption is only if you email to another Proton user. Other email providers would not be able to decrypt the message for the user to read. While readers of this board might not need the distinction to be made, the vast majority of the population definitely does though. I have had multiple conversations with people that did not consider their Proton mail sent to a Gmail user wasn't fully encrypted.

Encryption is hard to get right on multiple levels. The biggest hurdle however will always be end users.
by msephton | 2026-01-08 19:53:27+00:00
OP here. Red does bleed that way with this, you can see the lines almost disappear (especially with vertical movement) if you enable the coloured shape layer which was added specifically for this purpose.

But it's not displaying any specific CRT, TV, PVM, etc. It's not a simulator, rather just a minimal (as in GPU work it results in) shader to give that kind of vibe/aesthetic.
by MMAFRAZ | 2026-01-08 19:53:54+00:00
Hi HN,

I’m Afraz, an independent builder working on Vect AI.

One consistent problem I kept facing while building and marketing products was deciding what to build or write next. Most teams rely on intuition, past data, or competitor copying — which often leads to wasted time and content that doesn’t convert.

To solve this for myself, I built the Market Signal Analyzer inside Vect AI.

The purpose is very specific:
identify real, current market demand before committing resources.

Instead of brainstorming topics or guessing audience interest, the tool surfaces live market signals such as:

recurring user questions and pain points

emerging themes gaining attention

angles that show demand but aren’t yet saturated

This has been most useful when:

entering a new market with limited intuition

deciding which content or feature is actually worth building

avoiding weeks of work on ideas the market doesn’t care about

I’m not trying to predict the future or automate strategy. The goal is simply to replace assumptions with observable signals earlier in the decision-making process.

For those who prefer to inspect systems thoroughly, all public pages are visible here:
https://www.google.com/search?q=site:vect.pro

You can explore the Market Signal Analyzer directly here:
https://vect.pro/#/app/tools?tool=Market%20Signal%20Analyzer

I’ve also documented the broader system and reasoning behind Vect AI in detail here:
https://blog.vect.pro/vect-ai-bible-guide

Curious how others here approach demand discovery today:

intuition vs data vs signals

what’s worked reliably

where tools like this become noise instead of insight

Happy to answer questions or discuss edge cases.
by GrantMoyer | 2026-01-08 19:53:59+00:00
The idea is that NPUs are more power efficient for convolutional neural network operations. I don't know whether they actually are more power efficent, but it'd be wrong to dismiss them just because they don't unlock new capabilties or perform well for very large models. For smaller ML applications like blurring backgrounds, object detection, or OCR, they could be beneficial for battery life.
by typical182 | 2026-01-08 19:54:11+00:00
Thanks for that link to the lobste.rs discussion.

> They may be an expert in Go, but from their writing they appear to be misunderstanding (or at least misrepresenting) how things work in other languages

I just read through all of that lobste.rs discussion.

Based on what I read there and my understanding of the different ecosystems, my conclusion was that certainly people there are telling Filippo Valsorda that he is misunderstanding how things work in other languages, but then AFAICT Filippo or others chime in to explain how he is in fact not misunderstanding.

This subthread to me was a seemingly prototypical exchange there:

https://lobste.rs/s/exv2eq/go_sum_is_not_lockfile#c_d26oq4

Someone in that subthread tells Filippo (FiloSottile) that he is misunderstanding cargo behavior, but Filippo then reiterates which behavior he is talking about (add vs. install), Filippo does a simple test to illustrate his point, and some others seem to agree that he is correct in what he originally said.

That said, YMMV, and that overall discussion does certainly seem to have some confusion and people seemingly talking past each other (e.g., some people mixing up "dependents" vs. "dependencies", etc.).
by mdasen | 2026-01-08 19:54:20+00:00
This is good, but it doesn't necessarily mean that Tailwind is out of the financial difficulty that we talked about yesterday. You can sponsor Tailwind for as little as $6,000/year. 29 companies were already sponsoring Tailwind including 16 companies at the $60,000/year level. Maybe Google AI Studio has decided to shell out a lot more, but it could also be a relatively small sponsorship compared to the $1.1M in sponsorships that Tailwind is already getting. Google has deep pockets and could easily just say "f-it, we're betting on AI coding and this tool helps us make UIs and $2M/year is nothing compared to what we're spending on AI." It's also possible that the AI Studio team has a small discretionary budget and is giving Tailwind $6,000/year.

It's good, but it's important to read this as "they're offering some money" and not "Tailwind CSS now doesn't have financial issues because they have a major sponsor." This could just be a 1-5% change in Tailwind's budget. We don't know.

And that's not to take away from their sponsorship, but on the heels of the discussion yesterday it's important to note that Tailwind was already being sponsored by many companies and still struggling. This is a good thing, but it's hard to know if this moves the needle a bunch on Tailwind's problems. Maybe it'll be the start of more companies offering Tailwind money and that'd be great.
by lagniappe | 2026-01-08 19:54:24+00:00
I was at an AI conference where Dell was showing off their new NPU enabled laptops, and they said its not used for anything yet and they didnt know if it could be, but it was their imagining of what such a processing unit would be and would need, so that they'd be AI ready when it came time. I don't think they grasped the type of AI people were enthused about and the type of AI that could be run locally on a laptop, and they admitted this much. How much of this was due to speaking to a sales engineer with these questions, I'm not sure, however the interaction made us both visibly uncomfortable.

This was approximately 2 years ago. One thing that they did have that was cool was a demo where they changed the City of Alamo TX's website into an AI first agent that speaks with a digital avatar.
by 8note | 2026-01-08 19:54:38+00:00
its not some pattern of abuse by shady actors manipulating opinions youre noticing, its voting algorithm and attention economy itself.

new ideas are constantly being published, and popular ones gain momentum by being shown to more people. as the idea gets saturated, the popularity gets overshadowed by the time based downranking.

if the idea is still popular though, in this case that ice murdered some woman as part of their shock and awe campaign, variations are going to show up such as "legal observer" and "mother of a three year old"
by pamcake | 2026-01-08 19:54:54+00:00
> That the relations between EU and USA are not in an historical maximum, no discussion... but enemy? The hyperbole is a little big too far fetched.

Is it, given this kind of talk from POTUS preceding the more recent threats?

> Let's be honest, the European Union was formed in order to screw the United States. That's the purpose of it, and they've done a good job of it.

And https://www.politico.eu/article/donald-trump-putin-russia-eu...

It looks mutual between EU citizens and Trump.

https://www.politico.eu/article/half-europeans-see-donald-tr...