MurphyA/hacker-news huggingface dataset:
by tptacek | 2026-01-21 02:40:53+00:00
There's no uncertainty at all about what NAT was meant to do; you can just read Cisco's introduction to the PIX, or it's statement about the acquisition of NTI, which are online.

Network administrators (less so security engineers) don't want NAT to be a security feature, so they've retconned a principle of security engineering that doesn't exist. If people were honest about it and just said they'd prefer to work on networks where less distortive middlebox features provide the same security controls, I'd have nothing to argue about.

But this article makes the claim that "NAT isn’t actually a security feature". That's simply false. People need to stop rebroadcasting this canard.
by gus_massa | 2026-01-21 02:41:08+00:00
> On my instagram the last reel i posted is showing that process, even though with a different design.

Permalink: https://www.instagram.com/cogs_and_curios/reel/DTNtEFPjEGQ/

> And i wanted the inner planets and the Moon so people and future alien minds will recognise it as the solar system.

I think it was successful.
by dang | 2026-01-21 02:41:55+00:00
We've banned this account for repeatedly and egregiously posting personal attacks. You can't post things like the following to HN, as anyone who has read https://news.ycombinator.com/newsguidelines.html will understand:

You’re a dishonest individual

https://news.ycombinator.com/item?id=46676214

you don’t actually give a shit about the rules [...] you’re just lying and misrepresenting things

https://news.ycombinator.com/item?id=46675325

Nobody else wants you here either. So just leave and take your weird fucking content policing nonsense with you and let adults have a conversation in peace. Don’t you have some kids skateboarding on the sidewalk to yell at instead?

And yet you felt the need to dress up your cowardice as some kind of moral argument. You’re exactly the kind of person I thought you were from the start it turns out. Congratulations.

https://news.ycombinator.com/item?id=46666023

That’s an incredibly gross personality trait.

https://news.ycombinator.com/item?id=46656285

Just straight up making shit up here. WTF are you talking about?

https://news.ycombinator.com/item?id=46485800

This is such nonsense and everyone who’s a web developer knows you’re not being honest

https://news.ycombinator.com/item?id=46462462

You are the one who replies here looking for a response despite knowing exactly how it was going to go. Don’t be upset when you put yourself in that situation intentionally and it doesn’t go the way you want it to and for no other reason than to misrepresent the data to suit your favourite company yet again. Please just do both of us a favour and don’t reply

https://news.ycombinator.com/item?id=46377969

I think you’re odd and I’m not trying to be impolite but you’re going to have to accept the fact that people find your hobby weird.

You have once again however just done the exact same thing I accused you of where you are responding to an argument that nobody actually made and then pretending you’re somehow victorious which again is odd behaviour.

https://news.ycombinator.com/item?id=46377025

The above cases are just a small sample of how badly you've been doing this. It is a serious abuse of this site.

I hesitated before banning, because you've also attacked the mods a lot and we don't ban people for criticizing us. However, attacking the mods doesn't make it ok for you to attack others.
by dfajgljsldkjag | 2026-01-21 02:42:55+00:00
I find it unfortunate that this article is glorifying the quite exploitative industry of hostess bars in Japan. From Wikipedia:

> A "snack bar" (スナックバー, sunakku bā), "snack" for short, refers to a kind of hostess bar. It is an alcohol-serving bar that employs female staff to serve and flirt with male customers.

It is the kind of place where lonely men pay money to talk to hostesses, and while the "mama" runs the show, there is also a staff of young women who do most of the work.

The example shown in the article, which happens to do speed dating and fortune telling, is absolutely not a central example of this kind of place.
by tomhow | 2026-01-21 02:43:21+00:00
We've asked you before not to break the guidelines. Political/ideological flamebait is not what HN is for and destroys what it is for. You can discuss these themes in curious ways, rather than inflammatory ways; indeed, you must, if you want your comments to avoid being killed by flags. Eventually we have to ban accounts that continually flout the guidelines. https://news.ycombinator.com/newsguidelines.html
by alexinavar | 2026-01-21 02:43:26+00:00
In the past, this was necessary to offer end-to-end encryption in web applications. Now, we can use the WebAuthn PRF extension[0] to enable encryption directly from a passkey, without having to deal with awkward key storage[1].

[0]: https://github.com/w3c/webauthn/wiki/Explainer:-PRF-extensio...

[1]: https://confer.to/blog/2025/12/passkey-encryption
by sai18 | 2026-01-21 02:43:32+00:00
You’re describing the pattern we’re seeing across most companies who are still on COBOL.

The shortage of COBOL engineers is real but the harder problem is enterprise scale system understanding. Most modernization efforts stall not because COBOL is inherently a difficult language, but because of the sheer scale and volume of these enterprise codebases. It's tens of thousands of files, if not millions, spanning 40+ years with a handful of engineers left or no one at all.

We're exploring some of this work at Hypercubic (https://www.hypercubic.ai/, YC-backed) if you're curious to learn more.

With the current reasoning models, we now have the capability to build large scale agentic AI for mainframe system understanding. This is going beyond line-by-line code understanding to reason across end-to-end system behavior and capturing institutional knowledge that’s otherwise lost as SMEs retire.
by k310 | 2026-01-21 02:44:04+00:00
Good luck. It looks pretty comprehensive, which should benefit a lot of people. I note that unlike everyone else, you say exactly what the IAP's get you. Most say nothing, cause me to search their website, if it exists, and then not really know what the extra money gets me.

Personally, I'm retired and the only activity worth tracking is my piano practice (which I highly recommend to keep one sharp over the years) and that's really up to me, since everything else is "optional" except necessary chores, and outdoor walks, which the watch tracks. (is that a good data source?)

And by the way, I get no previews, either on Firefox, Safari and the AppStore on the mac, and Safari and the App Store on the phone. Only variable is iCloud Private Relay, which is usually very well behaved., and other apps show.

HTH, fellow vet.
by xl-brain | 2026-01-21 02:46:03+00:00
Think about what 99% of SOHO users have: PAT (Nat Overload). This NAT impacts the way a connection is established in BOTH directions. Inbound connection attempts from the Internet to the NAT public IP address of the SOHO router can go no further than the router. We are talking what 99% of users have installed.

Maybe this is the reason for some of the disagreement. I am focusing on what is installed at 99% of user installations (PAT). I would agree with the comments that a 1-to-1 NAT offers no EXTRA security.
by b00ty4breakfast | 2026-01-21 02:46:33+00:00
I wonder how much of an effect human activity has on these cycles. Obviously, there are cycles within nature that don't include human activity but is this particular "equilibrium" (if we could call it that) the result of human settlements and all that entails or have they always happened this way but without a huge chunk of the population being in the midst of these modulations to witness it and be affected by it.
by catapart | 2026-01-21 02:47:27+00:00
not a downvoter (actually, an upvoter), so grain of salt, but in my experience people cannot stand this framing. my best guess is that they dislike how impractical it is. obviously it's too abstract to be useful for most practical application. but that doesn't make it any less true.

it's a bit like saying "everything is a process", or "everything is a part of the same singular process that has been playing out since observable history". there's some interesting uses you can get out of that framing, but it's not generally applicable in the way that something like "all programs are unable to tell when a process will halt" is.

but if you really want to harvest the downvotes, I haven't found a better lure than "everything, including the foundations of mathematics, is just a story we are telling each other/ourselves." I know it's true and I still hate it, myself. really feels like it's not true. but, obviously, that's just the english major's version of "everything is a function".
by floam | 2026-01-21 02:48:18+00:00
Yeah, that is the axis.

Turns out this specific scenario has indeed been mulled before I happened along with huge idea when accepted into a clinical trial.

Allan Norwich, The Clinical Trial Research Participant As An Inside Trader (J. Health Law, 2006).

… the Article concludes that, absent an agreement to the contrary, the participant would be free to trade securities based on any material nonpublic information learned in the trial.
by Privavault | 2026-01-21 02:51:26+00:00
Many privacy policies explicitly state they can change at any time, with or without notice, making the problem even worse. So even if you carefully read and understood what you agreed to today, it could be completely different tomorrow.

This phenomenon is especially concerning for sensitive documents like immigration paperwork, medical records, or legal files. I've been working on PrivaVault (launching in 3 days) specifically because of this using client-side encryption so the service provider literally can't access your files, regardless of what the privacy policy says or how it changes. The architecture makes privacy a technical guarantee rather than a legal promise.

For anyone dealing with AI tools and sensitive docs right now: assume anything you upload can be read by the company, their employees, and potentially used for training unless they explicitly state otherwise AND use encryption where they don't hold the keys.
by JamesSwift | 2026-01-21 02:51:53+00:00
I think its clear the team is drowning. They are just trying to keep their head above water. They have massive adoption, high churn in the underlying models, and unlimited numbers of github issues opened every day.

Should it be solved by now? Yes. If anyone on the team is dogfooding it in a typical tmux environment, its painful. But lets give them some leeway here.
by zamadatix | 2026-01-21 02:52:36+00:00
Instead of searching online for things about the PIX, one could see the inlined, sourced, and dated references I placed above rather than make assumptions of others reasons or intentions.

What some people do or don't want in the 2020s has no relevance to the reasoning in the 1990s, nor does it redefine the purpose or use of NAT the same.
by kderbe | 2026-01-21 02:52:48+00:00
Rtings publishes charts in abundance, but the subjective quality of a monitor is more important. For example, a chart will tell you a monitor has low color deviation from sRGB after calibration, but won't tell you that the monitor UI takes 10 laggy clicks to switch from sRGB to DCI-P3 and will reset your selection every time you toggle HDR mode.

I admire Rtings' attempts to add more and more graphs to quantify everything from VRR flicker to raised black levels. They were helpful when I last shopped for a monitor. But the most valuable information came from veteran monitor review sites such as Monitors Unboxed and TFTCentral.
by alwillis | 2026-01-21 02:54:31+00:00
> From the point of view of the slave states (which is a perfectly valid point to claim as there isn't an objectively correct baseline here), the 3/5 compromise gave them less representation.

This is not accurate, and there was a baseline: one man equals one vote.

It was a compromise because the northern states didn't want to count slaves at all because they're not allowed to vote; they were just property.

Of course, the South wanted to count slaves (for census purposes) as a person, even though they couldn't vote.

By allowing slaves to be counted as 3/5 of a person, it enabled the South to have more representation in the House, since the number of representatives is based on the population of the state.

If they weren't allowed to count their slaves, they would have had fewer representatives in the House and wouldn't be able to control legislation, etc.

They wouldn't have done it if it resulted in less representation in Congress.
by pibaker | 2026-01-21 02:55:03+00:00
I dont know what you majored. But when I was a CS major maybe 50% of my grade came from projects. We wrote a compiler from scratch, wrote something that resembled a SQL engine from scratch, and wrote sizeable portions of an operating system. In my sophomore year we spent at least 20 hours a week on various projects a week.

We could use any resource we coulc find as long as we didn't submit anything we didn't write ourselves. This meant stackoverflow and online documentations.

There is no way you can test a student's ability to implement a large, complex system with thousands of lines of code in a three hour exam. There is just no way. I am not against closed book paper exams, I just wish the people touting them as the solution can be more realistic about what they can and cannot do.
by raddan | 2026-01-21 02:56:46+00:00
I suppose I should have said “nominally want to learn” etc, but I think you are right: most students simply want the credential. I maintain that this is still a strange attitude, since at some point, some employer is going to ask you to do some skilled work in exchange for money. If you can’t do the work, you are not worth the money, credentials be damned. On the other hand, I routinely see unqualified people making a hash out of things and nobody really seems to care. Maybe the trick is not to be noticably bad at your job. Still, this all strikes me as a bad way to live when learning and doing good work is both interesting and enjoyable.
by SR2Z | 2026-01-21 02:57:23+00:00
> The only realistic threat is the US, which is an ally, in theory. Now a threat.

The realistic threat is Russia, which is currently winning a war in Ukraine through sheer attrition and will succeed unless Europe steps up big time.

I hate Trump and would much rather see the world keep on going the way it has been, but Europe's militaries grew around an American core after WWII. A few nations have serious armies (France, for one) but most of Europe is close enough to a US airbase for a small military to work fine.

This misses the point, which is that Europe and the US need each other. Without the US, Europe stands no chance against Chinese and Russian influence. Without Europe, the US cannot stand against China and Russia.
by trhway | 2026-01-21 02:57:24+00:00
the current world split starts to eerily look, while still far from it of course, like the 1939 split in Europe - totalitarian regimes of Stalin and Hitler allied together against Europe's democratic countries. Here we have authoritarian leaning Trump starting to ally himself with totalitarian Putin and China against democratic countries by dividing the world in very similar way as Stalin and Hitler divided Europe.
by fasbiner | 2026-01-21 02:58:17+00:00
This is not a good line of reasoning since it would just as surely apply to such fanciful cult terms like "I'm using fargate with docker over ECS to integrate with ceph, but I'm considering switching to talos and EKS."

It is valuable to use unique terms of art that are not heavily overloaded and this is what gastown's terminology is intended to do, which also really helps LLMs since they are as much dumb text search as they are vector embedding.
by mzajc | 2026-01-21 03:00:33+00:00
I have yet to see a "NAT is not security" rebuttal that does not make either one or both of these points:

- NAT is not a security feature because it wasn't designed as one (this post), and/or

- NAT is not a security feature because it does not, without a firewall, protect against an attacker on the WAN subnet, or another difficult-to-exploit scenario.

But making LAN devices unroutable from the Internet does on its own makes exploitation much more difficult. It's admittedly not a perfect measure, but it's one that IPv6 deployments with routable addresses for LAN devices lack. I would wager this does make a difference in the proliferation of botnets, especially given the lackluster standards of consumer network equipment security.
by andrew_lettuce | 2026-01-21 03:01:04+00:00
Maybe you should look into the context. The investigation is supposedly over lying to Congress about the true cost of the renovation of the federal reserve HQ. Despite being a topic week within the current president's wheelhouse, this is incredibly flimsy even if true. It sure looks like a politically motivated attack because the Fed chair won't let Trump dictate monetary policy - thank God!
by FireBeyond | 2026-01-21 03:02:38+00:00
> US health insurance coverage is very insurance-like, due to the out of pocket maximum.

Well, other than that whole "out of network" thing...

> Determining health insurance coverage can't be simple, because fixing bodies is not simple. It's unknown what will and will not fix issues, how to even measure if there is an issue, and what will cause more issues and the cost/benefit of that fix.

Don't disagree - but that doesn't make what we have more "insurance-like".
by throw0101c | 2026-01-21 03:05:14+00:00
From the transcript:

> We knew the story of the international rules-based order was partially false, that the strongest would exempt themselves when convenient, that trade rules were enforced asymmetrically, and we knew that international law applied with varied rigor, depending on the identity of the accused or the victim.

> This fiction was useful, and American hegemony in particular helped provide public goods, open sea lanes, a stable financial system, collective security, and support for frameworks for resolving disputes.

An interesting observation I came across today:

> The genius of American foreign policy since 1941 was that it found a way to be both the single strongest state and the leader of the strongest coalition of states: power and legitimacy, together. That's the achievement Trump has jeopardized - and possibly permanently wrecked.

* https://x.com/davidfrum/status/2013735844721349115#m

* https://xcancel.com/davidfrum/status/2013735844721349115#m
by robocat | 2026-01-21 03:08:32+00:00
That is the "Single Cause" Fallacy or Causal Reductionism. That is the tendency to oversimplify a complex system by highlighting one "root cause".

Selecting a single measurement is the same as selecting a purpose.

Either way, we see people can choose a nonsense root cause, to argue something specious by defining a nonsense POSIWID.

There's also a crossover with the human tendency to try and attribute causes to the bosses of a system. Sometimes systems are emergent and are not designed/run by any specific person. Especially when hallucinating benefits to specific people e.g. "follow the money". I'd like to define this as "agentic reification of emergent systems" however unfortunately modern times are creating noise around each of those words.

In general I find it interesting to see how people argue about systems. From what I see, very few people understand the systems they comment upon - instead most people rely on political memes and shallow analysis instead of any deeper rational thinking. I've been decomposing my own thinking about mortgages for a while and I'm still terribly ignorant about that system!

Aside: and thank you: I found out about the Glowies meme while writing this comment, meme seeded by Terry Davis https://news.ycombinator.com/user?id=TerryADavis
by alex1138 | 2026-01-21 03:08:33+00:00
Does that course cover "It's not a good idea to forcibly add gay people to groups and then publically post it to their timeline, outing them"? Or perhaps the photo tags that get added of them (sometimes automatically) at the gay club

(I use the second one as an example, without reference to anything specific, but the first one really did happen. Jason Calacanis talks about it in his interview on Lex Fridman)
by k310 | 2026-01-21 03:08:50+00:00
I have suspected all along that AI will commoditize, as in "free with your phone purchase" and sediment, being valuable only to verticals with highly curated databases.

Microsoft and Google have been in the "all things to all people" business, IMO, and to me, that's no moat around that, and invites enshittification.

As infinitewars implies, another excuse for massive data-gathering, and many of us watched the entanglement of search engines and government evolve (or devolve, depending on your POV) But what happens when you have ALL the data?

Again, I think that this massive funneling is, as we said in fishing, just dynamiting the lake and collecting all the fish.

Businesses with specialized needs won't need Microsoft, since they can/must create their own focused databases and spin up their own apps, witness DeepSeek and friends. I really don' think that a surgeon cares about the latest TikTok trends.
by tkgally | 2026-01-21 03:08:56+00:00
Great advice.

> Tell the agent your spec, as clearly as possible.

I have recently added a step before that when beginning a project with Claude Code: invoke the AskUserQuestionTool and have it ask me questions about what I want to do and what approaches I prefer. It helps to clarify my thinking, and the specs it then produces are much better than if I had written them myself.

I should note, though, that I am a pure vibe coder. I don't understand any programming language well enough to identify problems in code by looking at it. When I want to check whether working code produced by Claude might still contain bugs, I have Gemini and Codex check it as well. They always find problems, which I then ask Claude to fix.

None of what I produce this way is mission-critical or for commercial use. My current hobby project, still in progress, is a Japanese-English dictionary:

https://github.com/tkgally/je-dict-1

https://www.tkgje.jp/
by repsilat | 2026-01-21 03:09:07+00:00
Yeah I guess a c++ programmer might say `std::array::operator[]` is a function (or method, whatever), just like `std::array::size` is. And that identifying the array with just one of those functions (or even the collection of all methods offered) is to miss the point -- not just contiguous indices, but contiguous storage. A red-black tree with added constraints is not an array.

TFA does allude to this. An "array indexing function" that just met the API could be implemented as an if-else chain, and would not be satisfactory.
by vivzkestrel | 2026-01-21 03:09:23+00:00
- Slightly veering off the topic here, to anyone reading this, I wanted to ask. I am thinking of starting a discord server for my SaaS

- The idea is to have a bugs channel that works like a forum (remember that new discord forum Q/A feature) where people come and post Q/A about bugs aka issues (SaaS is not open source)

- A feedback channel where people can submit feedback, paste screenshots, (not sure if links should be allowed here)

- What kind of tools, bots do you recommend so that it doesnt get overloaded with junk, spam or worse porn and crypto stuff
by apublicfrog | 2026-01-21 03:10:27+00:00
I've argued this with people for years. The construct of what you can afford/need to pay is largely artificial. Most people can move to a cheaper area, sell their posessions, work a menial job and live frugally to save for 5 years and buy land away from things and live out their life in peace. Or a million other ways. The social rules of how you live are not real.