MurphyA/hacker-news huggingface dataset:
by AmiteK | 2026-01-22 06:14:52+00:00
Yes. In the MCP setup the agent doesn’t decide to regenerate arbitrarily.

When stamp context --watch is active, the MCP server detects it. The agent first calls logicstamp_watch_status to see whether context is being kept fresh.

If watch mode is active, the agent can directly call list_bundles(projectPath) → read_bundle(projectPath) and will always read the latest regenerated output. No snapshot refresh is needed.

If watch mode isn’t active, the workflow falls back to refresh_snapshot → list_bundles → read_bundle.

So “consume” just means reading deterministic files via MCP tools, with watch mode ensuring those files stay up to date.
by fulafel | 2026-01-22 06:16:06+00:00
The article doesnt' claim it's executed straight up either ("can result") but it's pretty ambiguous:

> When the project is opened, Visual Studio Code prompts the user to trust the repository author. If that trust is granted, the application automatically processes the repository’s tasks.json configuration file, which can result in embedded arbitrary commands being executed on the system.

In the screenshot the task is named "node" - so it's a bit like embedding a malicious Makefile target as a backdoor.

Except harder to spot since it's in a obscure .vscode/somethingsomething json file. (And probably you can easily fool GH Copilot to run it)
by verdverm | 2026-01-22 06:16:31+00:00
Having been working on my agent's context engineering heavily of late, the following is based on my personal experience messing with how that stuff works in some fundamental ways

I don't really think dumping all this unnecessary information into the context is a good idea

1. search tools like an LSP are far superior, well established, and zero maintenance

2. it pollutes context with irrelevant information because most of the time you don't need to know all the details you are putting in there, especially the breadth, which is really the main issue I see here. No control over breadth or what is or is not included, so mostly noise for any given session, even with the folder separation. You would need to provide evals for outcomes, not minimizing token usage, because that is the wrong thing to primary your optimizations on
by userbinator | 2026-01-22 06:17:03+00:00
https://xdaforums.com/t/howto-root-required-remove-network-l...

https://xdaforums.com/t/removing-carrier-lock.3903352/

https://xdaforums.com/t/no-root-needed-carrier-unlock-carrie... (I know what the title says, but this procedure is generic to Mediatek and they are also easily rootable)

Look around that site in general, plenty of Android modding information.

Also see "SIM lock" here:

https://gist.github.com/sadiqsalau/865364b344c0b9cb1b418df8b...
by promptfluid | 2026-01-22 06:17:04+00:00
I got tired of building the same AI 'plumbing' (vector memory, routing fallbacks, rate limiting) every time I started a project.

I wanted a system that was AI-native from the metal up, not just a script with a prompt.

The first Cognitive Substrate:

It’s an 8-module ecosystem built on Supabase Edge Functions and a year long development sprint.

The Modernizer:

This is the core. The system analyzes its own archived code from an ecosystem I built (300+ functions) and proposes its own performance upgrades. It’s a self-healing loop with a human safety gate. All I have to do is approve it. Currently it makes the proposals but I have a little work left to get it to auto apply updates.

Dream Cycles:

Every night between 2-5 AM, it runs a consolidation cycle—moving 'Hot' memories to a Knowledge Graph and compressing 'Cold' (persistent) storage.

The Nexus:

A multi-provider router that uses Groq/Cerebras for speed and falls back to DeepSeek/Together if latency spikes. This keeps my compute costs at zero, as I just leverage the free calls provided by LLMs already. This of course won’t work at scale - but for dev purposes it has no upfront cost to me and even at scale, the router chooses the cheapest provider for any given API call as well as the best LLM to get the answer from.

The Philosophy:

Software in 2026 shouldn't be static. It should be a living, cognitive substrate.

I’m currently the only dev, but the 'Modernizer' handles about 30% of my maintenance tasks now and I’ve already built the switch to turn it on auto build mode (with shadow builds you push to production after review).

Here is a link to the substrate:

https://CMPSBL.com

I also linked a video of the terminal so you can see it from the inside out. Happy to answer any questions about the architecture or where I envision this project going in the future.

If you’d like to build an app or chat bot or anything using the substrate - let me know and I’ll get you the dev docs and portal with over 70 templates already released to make building frictionless.
by reerdna | 2026-01-22 06:18:05+00:00
I recently built a Plan 9 cluster of 8 raspberry pi zero (2w). From my supplier (digikey) the 2W was the same price and has 4X the cores!

I think it looks quite cool: https://x.com/andreer/status/2007509694374691230

Instead of having to use lots of dongles and usb ethernet, I just wired them all up using brass rods, a small 5V power supply in the base, and boot them over WiFi (just the kernel and wifi config on the sd card).

Raspberry pi's are cheap, easily available, and there is an absolutely massive trove of information about them on the internet. And the scale means that the linux implementation is very stable and "just works" to a degree that is extremely hard for other SBCs to match.

Sure, VMs are the logical choice, but not everything has to be logical. Real hardware does feel more real :-)
by prmoustache | 2026-01-22 06:18:33+00:00
Most of the issues people had was authorizing their webcam/microhpone on their browser, it was no different/better with Zoom than any other service.

And other services also had their own easy to install app (I think Jitsi only dropped the desktop app fairly recently).

I think the only thing really easier with Zoom was remembering the name. I think the brand constitutes 99% of its success.
by vee-kay | 2026-01-22 06:19:43+00:00
Meanwhile, Trump's been threatening 500% tariffs on India, because India won't bend the knee to US strongarm tactics to take over India's agriculture and other industries.

FYI, e.g., US companies Amazon & Walmart already dominate India's eCommerce industry. US company Monsanto had total monopoly on India's cotton agriculture industry by decades of corrupt practices by Monsanto to take over the indigenous cotton seeds varieties, hybridize them (GM crop), patent them, and then charge Indian farmers for using those seeds. Indian govt rejected those farmers and freed Indian cotton industry from Monsanto's stranglehold. PepsiCo has also been doing same shenanigans to Indian potato agriculture.

India is worried that USA wants to decimate Indian indigenous agriculture and control India where it hurts most - its stomach (India has among the most fertile lands in the world. And it has huge agriculture exports. Whoever controls its agriculture, controls India.)

Indian government has been doing a lot of efforts in past decade for "Make in India" initiatives - manufacturing in India. So this is another avenue for foreign players to control India, if Indian government allows uncontolled FDI (foreign direct investments) into it (just like how Amazon and Walmart took over India's eCommerce industry.)

India is rightfully wary of Trump and USA. But it is yet to bend the knee.

When Trump threatened 500% tariffs on India last November, India silently raised tariffs on agri exports to USA, and Trump had to back off. But he's been making the same noises again because India doesn't agree to his bullying demands.

EU should have faced the Trump's 8% tariffs head on. Bullies should be taught their place by the majority.
by bitwize | 2026-01-22 06:19:46+00:00
Having a consistent setup makes it easier for your organization's IT team to support you, troubleshoot issues, etc. It also makes it easier for you to collaborate with other members of your team, or even other teams. If your coworker Fred comes to you asking for help on how to refactor something, for instance, it will go much more easily if you're running the same IDE with the same refactoring tools.

Organizations establish and enforce standards for a reason.
by ryuzaburo | 2026-01-22 06:20:33+00:00
We need to stop viewing these iOS 18 patches as mere "fixes." For sophisticated attackers, these release notes serve as "CVE Feature Catalogs" to weaponize simple human errors.

I’m currently finalizing a detailed forensic report on a real-world incident where I was the target of this exact attack chain. It began with a casual social encounter—a classic shoulder-surfing of my 6-digit passcode—but escalated through the unpatched vulnerabilities I’m now documenting.

As an IT architect, I’ve spent the last few weeks performing a deep-dive into the device logs to understand the "Authorization Gap" that allowed this to happen. What I found is terrifying: a single unpatched CVE combined with a stolen passcode effectively turns an iPhone into an identity-theft kit. Leaving these updates unpatched isn't just a security risk; it’s providing the final components for your own identity’s subversion. I’m sharing this because this isn't theoretical—it’s a systemic failure that is already being exploited.
by queenkjuul | 2026-01-22 06:20:37+00:00
RMS has, through very deliberate means, made his precise opinions on the subject extremely prominent.

And said opinions are, in my view, extremely disgusting, if not reprehensible.

You may police your public image, i don't. If you agree with RMS, i certainly don't blame you, though I'll be certain to remember your name.
by bccdee | 2026-01-22 06:20:48+00:00
Yeah—I'm reminded of the opening sentence of Slaughterhouse Five, which goes, "Listen: Billy Pilgrim has come unstuck in time." Kurt Vonnegut isn't worried that you're not listening; he's trying to create a sense of intimacy and emphasis, as one who is taking you aside to tell you something crucially important which he fears you may dismiss out of hand.

It seems intuitive to me that the "hwaet" functioned more as a literary device than as a simple call for attention. It is, after all, a poem.
by verdverm | 2026-01-22 06:20:55+00:00
As soon as you involve the agent and having it make tool calls, it is no longer deterministic

This is in fact the very reason I set out to build my own agent, because Copilot does this with their `.vscode/instruction/...` files and the globs for file matching therein. It was in fact, not deterministic like I wanted.

My approach is to look at the files the agent has read/written and if there is an AGENTS.md in that or parent dirs, I put it in the system prompt. The agent doesn't try to read them, which saves a ton on token usage. You can save 50% on tokens per message, yet my method will still use fewer over the course of a session because I don't have to make all those extra tool calls
by AmiteK | 2026-01-22 06:21:08+00:00
That’s fair, and I agree LSP-style search is excellent for interactive, local exploration. LogicStamp isn’t trying to replace that.

The problem it targets is different: producing stable, explicit structure (public APIs, components, routes) that can be diffed, validated, and reasoned about across runs - e.g. in CI or long-running agents. LSPs are query-oriented and ephemeral; they don’t give you a persistent artifact to assert against.

On breadth/noise: the intent isn’t to dump everything into one prompt. Output is sliced (per-folder / per-contract), and the assumption is that only relevant bundles are selected. Token minimization isn’t the primary goal; predictability and selectability are.

In practice I see them as complementary: LSPs for live search, generated contracts for ground truth. If your workflow is already LSP-driven, LogicStamp may simply not add much value - and that’s fine.
by crote | 2026-01-22 06:21:29+00:00
The problem is that disappearing ink is a thing, and someone could swap out the source of ink (pen, stamp pad) in the voting booth.

Erasing is indeed a possibility with pencil markings, but this can only happen during the counting process - which should be open to anyone to audit, and anyone messing around with an eraser during the counting process would stand out like a sore thumb.
by mschild | 2026-01-22 06:21:34+00:00
Fully agree on CMR being the way to go, especially for things like home servers.

The only other value might be the power on hours (POH). Effectively the intended daily running time. If youre looking for something that sits in a server, best pick something with 24h.

Beyond that I think the only other difference is warranty. I know Toshiba gives 5 years on their higher end pro models.
by moomoo11 | 2026-01-22 06:21:54+00:00
I stopped using Anthropic when they pulled a shitty fast one on Max users by limiting Opus usage and forcing people to use sonnet.

I’m happy with Codex 5.2 Extra high reasoning. It works imo way better, doesn’t bug out (CC has so many bugs), and I barely ever go below 40% weekly usage
by deathanatos | 2026-01-22 06:22:31+00:00
> 500 Internal Server Error

> The operation is insecure.

As a backend engineer, I am beyond tired of frontend engineers taking what is a Javascript programming error ("[Uncaught DOMException:] The operation is insecure" is a JS exception. It is most commonly raised when a page wants access to APIs without permission to such) and blaming it on the backend ("500 Internal Server Error" — except this is just a lie. No 500s occurred).
by autoexec | 2026-01-22 06:22:52+00:00
It means that some people will be able to force others to vote a certain way, punish them if they don't vote a certain way, or even pay them for their votes. Those schemes are a lot less effective when you can't prove how someone voted. People can try to bribe you, or even intimidate you, but once you're in the voting booth you have the freedom to vote however you want and nobody can find out later which way you actually voted. That freedom is very important and worth keeping. You already know which way you voted, no one else needs to be able to check.
by aboardRat4 | 2026-01-22 06:22:56+00:00
>How do you want to get me onto your WAN interface?

I've already given you _all_ information you could have realistically squeezed from me. The only thing left for you is to prove that NAT is not a security measure and break into my machine, given that you already have both login and pass.

If you had exactly those parameters with ipv6, you would have already broken in.
by defrost | 2026-01-22 06:23:14+00:00
> Beneath contemptible.

Which? Implying they are a Hitler fanboi, or them implying you're a Putin bot?

> different strokes for different folks.

Each with one leg both the same - I find it hard to slide a feeler guage twixt either of the two behaviours.

As for the HN guidelines, they're hardly international, just this forum specific. I've no doubt you can play nice should you choose.
by AmiteK | 2026-01-22 06:24:20+00:00
I think there’s a conflation here between artifact determinism and agent behavior.

LogicStamp’s determinism claim is about the generated context: same repo state + config ⇒ identical bundles. That property holds regardless of how or when an agent chooses to read them.

Tool calls don’t make the artifacts non-deterministic; they only affect when an agent consumes already-deterministic output.
by baxtr | 2026-01-22 06:25:04+00:00
> Had authorities withdrawn IPv4 routes, as they did with IPv6, Iran would have become completely unreachable, as Egypt was in January 2011. By keeping IPv4 routes in circulation, Iranian authorities can selectively grant full internet access to specific users while denying it to the broader population.

As of late, we’ve seen a few measures like the restoration of transit from Rostelecom and the return of routes originated by IPM, as the country appears to be moving towards a partial restoration. At the time of this writing, the plan appears to be to operate the Iranian internet as a whitelisted network indefinitely.

I’d call that digital apartheid.
Show HN: Scribefully is a portfolio/HN-style community for academics & pros
by hoag | 2026-01-22 06:25:39+00:00
Hey HN! I'm a founder first, lawyer second. I understand code stacks well enough to explain them, but I've never been able to actually build software, and this has been a chip on my shoulder my entire life.

So Scribefully started as my first vibe coding project last summer. I'd read that building something with HN-style upvoting was a good learning project, and I was curious to try Claude Code.

The more I built, the more I realized I wanted what it evolved into: a single place to aggregate all my scattered professional work -– articles, papers, videos, code -– into one shareable page, with community upvoting baked in. Carrd and others offer portfolios, but none merge that with a social layer. Think HN meets a portfolio builder.

Example portfolios to check out:
- https://scribefully.com/author/marc-hoag
- https://scribefully.com/author/tawanda-kanhema

Browse everything without an account. Signup only required to comment or claim authorship. Completely free.

The hardest part was letting people use the site without signing up –- even submitting anonymously -– but claiming authorship later. This auth flow alone probably took 40-50 of my ~100 total hours. Race conditions are brutal, but of course you know that already.

Tech: Next.js 15, React 19, Supabase, Tailwind, Render. Built with Claude Code and ChatGPT Codex.

Side effect: I got so frustrated with context window issues (and secrets management) that I built this: https://github.com/marchoag/Claude-Code-Setup-Wizard-MD

I've shared Scribefully with academics and professionals since last July; figured it was time to Show HN.

Building this –- and an iOS app I shipped last week (FloodRoute for tracking flooded roads) –- has been kind of emotional. You can't imagine what it means to finally build software after years of only understanding it.

What a fantastic, magical time to be alive.
by tsimionescu | 2026-01-22 06:25:44+00:00
I've explained before, in many threads, that pure consumer NAT, without a firewall, has exactly the same behavior as a consumer stateful firewall, except for two cases :

1. The ISP is malicious/compromised, and sends packets with RFC1918 addresses on the router's WAN port.

2. The router itself has admin services that are listening on public IPs (eg HTTP server listening on 0.0.0.0 instead of 192.168.0.1), so it itself could be compromised from outside the ISP network.

Except for these two points, there is no difference between the security characteristics of a consumer NAT and a consumer firewall:

1. LAN machines can't be reached over the internet other than through the NAT, since a packet addressed to 192.168.0.7 from Google will not be routed by any ISP.

2. When a packet arrives to the NAT with a destination IP set to the NAT public IP, the packet will not be delivered to any box on the LAN unless (a) its ports match an active connection from a LAN box, or (b) its destination port matches an explicit port forward rule an admin added.

Case (a) above is exactly what a stateful firewall with a default deny rule does. Case (b) is also exactly the same, as if you explicitly open a port in this type of consumer firewall, it will allow any packet matching that port.

Now, I wouldn't disable my firewall, because I don't trust that my consumer router is itself well enough secured, and I don't necessarily trust my ISP's network either. But this doesn't mean that my laptop is exactly as secure if it were to sit behind this router with no firewall as it would be if I disabled both firewall and NAT entirely and gave my laptop a publicly routable IPv4.
by seanhunter | 2026-01-22 06:27:06+00:00
For people who are not aware, the title is a reference to the absolutely amazing poem “The Second Coming” by W. B. Yeats[1]. It’s one of my favourites, and one particular line from it seems incredibly resonant at the moment

> The best lack all conviction, while the worst
> Are full of passionate intensity.

[1] https://www.poetryfoundation.org/poems/43290/the-second-comi...
by tsimionescu | 2026-01-22 06:28:38+00:00
> And this is... actually not true. If there's a server listening on the relevant port, the connection is accepted.

Fine. Packets that arrive at the router with the router's own IP address and a port that doesn't correspond to either an open connection, an explicit port forwarding rule, OR the port of a service on the router itself listening on the WAN IP will also get refused.

The point is that any LAN box sitting behind the NAT will not get that packet, same as if the router had a stateful firewall running.

And sure, this is not purely a property of the NAT itself, it's a combination of the Internet not routing private IP addresses, reverse path filtering, and NAT. That still doesn't need any firewall to achieve this.
by wahern | 2026-01-22 06:28:49+00:00
The core primitives written in assembly operate on fixed sized blocks of data; no allocations, no indexing arrays based on raw user controlled inputs, etc. Moreover, the nature of the algorithms--at least the parts written in assembly, e.g. block transforms--means any bugs tend to result in complete garbage and are caught early during development.

IMO, a significant fraction of OpenSSL bugs could be prevented if they just used a small library for managing buffers. Nothing fancy, just one or two 3- or 4-member structs and some routines over those structs that can be inlined everywhere[1], replacing all the manual pointer arithmetic on dynamically sized buffers. To cover most cases it doesn't even need to support allocation, just provide a way to centralize indexing and therefore overflow checking. Excepting static arrays, buffer overflows in Rust are prevented not by the language, per se, but by the standard library, particularly std:vec. OpenSSL has BIO and some similar interfaces, but they tend to be too heavy weight and involved, which dissuades their use.

[1] The one in my personal toolbox just looks like roughly like `struct fifo { unsigned char *base; size_t size, head, count; };`, with a dozen or so routines for initialization, reading, writing, deriving slices, etc. The routines are all defined in a single header as `static inline` and in practice the performance is indistinguishable from littering manual pointer arithmetic and memcpy's everywhere.
by m-schuetz | 2026-01-22 06:29:26+00:00
I've also used Eclipse in the past but almost exclusively used vscode in recent years. It's just a phenomenal text editor. It's got fantastic multi-line selection and editing tools and searching for files is instant and you don't even need to be fully accurate with the filename. Nowadays I hardly ever use the sidebar to look for the file, I just type thr ctrl+e shortcut and insert several letters of the file and I instantly get the result. It's a small thing with a huge impact. VS, for comparison, lags a few seconds when searching files, and it misses files that are not imported into the workspace. That difference makes VS useless to me.
by sixtyj | 2026-01-22 06:29:29+00:00
The last paragraph is so accurate. Thanks. Just a small note: Developers, add your photo (mug shot) to your code, you receive more money. People do business with people.

In some book about behavioral economy there was a test with people in company kitchenette.

Above the coffee machine, there was a sign asking people who drink coffee at work to contribute to a jar for the next cpurchase. One sign was just text, while the other was also made with eyes. The one with eyes raised more money.
by ameshkov | 2026-01-22 06:29:59+00:00
We do, and from what we know a bigger problem in China is detecting traffic patterns. SNI filtering is not that big of a deal, in order to block your domain it needs to first learn which one you’re using. What for the traffic patterns, people in China prefer to selectively route traffic to the tunnel. For instance, the client apps allow you to route *.cn domains (or any other domains) directly. It makes it harder to detect that you’re using a VPN.