MurphyA/hacker-news huggingface dataset:
by Reason077 | 2026-01-17 01:33:27+00:00
> "The biggest suprise about the lightning is that Ford didn't put in a gas engine in it as a range extender."

From a manufacturing perspective, adding a range extender does add a lot of cost and complexity. And from an ownership perspective it adds a lot of service, maintenance and reliability considerations that you don't have with a pure EV.

But in any case, this is exactly what they're doing: replacing the Lightning with a range extender ("EREV") plug-in hybrid. But a new all-electric truck based on Ford's upcoming, cheaper "Universal EV platform" is also due in 2027.
by alwillis | 2026-01-17 01:33:50+00:00
> You could argue that The Don in charge of the US is in control of letsencrypt

He's not in control of letsencrypt or any other US-based CA.

It may not be well known, but Trump's administration loses about 80% of the time when they've been sued by companies, cities and states.

There's much more risk of state-sponsored cyber attacks against US companies.
by mcpherrinm | 2026-01-17 01:34:59+00:00
The "client cert" requirements were specifically not a CABF rule because that would rule it out for everyone complying with those rules, which is much broader than just the CAs included in Chrome.

Some CAs will continue to run PKIs which support client certs, for use outside of Chrome.

In general, the "baseline requirements" are intended to be just that: A shared baseline that is met by everyone. All the major root programs today have requirements which are unique to their program.
by AceJohnny2 | 2026-01-17 01:35:07+00:00
Counter-anecdata: I have 2 Dell U2720Q (Ultrasharp 27") bought in 2021 and they've been great.

That said, I've always stuck for Dell's upper-range Ultrasharp (U prefix in models) monitors, being slightly wary of their cheaper series which the S in your S3221QS implies.
by freehorse | 2026-01-17 01:35:36+00:00
I am also in OP's boat and, even though these are great suggestions, personally I would like to be able to do a basic thing such as opening an app with a built-in way rather than having to download yet another app to do that. Every major macos update I have to worry about spotlight reindexing things.

What I find really annoying with macos is that with stock/default settings it is the worst UX. You have to download an app to launch apps, an app to move and resize windows, an app to reverse the mouse's wheel direction to be the opposite of the trackpad, an app to manage the menu bar (esp decrease the spacing, so that you can fit items up until the notch). Then, you also need anyway to spend an hour tweaking settings and run custom commands (such as `defaults write -g ApplePressAndHoldEnabled -bool false` so that you can actually type stuff like aaaaaaaaaaaaaaaaaaaaa). These are just needed to make using macos bearable, and do not include any kind of "power user" kind of stuff.

I used to hate macos before getting my own mac, because I had to use some at work in their default settings and it was just a horrible experience.
by gsf_emergency_6 | 2026-01-17 01:38:08+00:00
That too

https://news.ycombinator.com/item?id=46604554

(U of M, Liaoning(!!))

>even for swing states, the best evidence is that small states do not benefit from the bias

So.. swing within the swing?

(FUN to imagine members of an "evil-sibling" of "Mossad" embedding, even featuring in Rock the Country tho :)

(Two) Texans going their own way?

https://youtu.be/LVJiLy2Z3Og

(Is that a tinge of Tassie (accent) from her partner?)

(Can imagine these 2 going to RtC btw)
by Havoc | 2026-01-17 01:39:23+00:00
Yeah I know, I've done scrapping too.

It can absolutely be that, but that requires a confluence of multiple factors - misconfigured scrapper hitting the site over and over, a big bot net like proxy setup that is way overkilled for scrapping, a setup sophisticated enough to do all that yet simultaneously stupid enough to not cope with a site is mostly text and a couple gigs at most and all that over extended timeframe without anyone realising their scrapper is stuck.

Or alternative explanation: It's a DDOS
by stubish | 2026-01-17 01:41:28+00:00
It is not a choice between ads or subscription. The choice is between ads, adblockers or subscriptions. Hardly anyone will pay the subscription when they have a free way or blocking the ads. It is wild that an AI company is banking on ad funded, when the second major use of the tech will be to block ads entirely. Even in the physical world when AR tech is good enough. Now that is a use for the AI chip on my next PC that I can get behind.
by thebiss | 2026-01-17 01:41:45+00:00
It's well supported by the architecture. You may be interested in:

- Lima - wsl2-like access to a virtual machine
https://github.com/lima-vm/lima/blob/master/README.md

- vfkit - CLI creation and management of applehv VMs
https://github.com/crc-org/vfkit

- podman machine - easily run x86 containers in CoreOs, via the podman CLI
https://docs.podman.io/en/latest/markdown/podman-machine.1.h...
by jerrythegerbil | 2026-01-17 01:42:03+00:00
The unfortunate truth is: it doesn’t matter.

These BGP leaks do happen all the time. Cloudflare is right. This is a gap to the http-01 challenge on cloudflare’s end. It should be changed to match the RFC, but not because it’ll change anything meaningful for security.

It doesn’t matter because this (and similar http-01/dns-01 challenge exploits that allow the issuance or interception of CA signed certificates) are not a rare occurrence, and are surprisingly easy to perform as an individual. Even more so for governments.

Addendum: certificate transparency logs are free and are scraped and sold. Don’t believe for a second anyone out there is doing any free analysis at scale to watch your back. The orgs doing analysis are ultimately paid by orgs using it to hide their operations better. Your small business use-case for the data is pocket change compared to those contracts.
by ww520 | 2026-01-17 01:42:07+00:00
There's the plug-in solar panel system. It's very easy to install. It's suitable for renters to add supplemental solar power with little cost and effort. It's portable enough that renters can bring them to their next rentals.

It's very popular in Germany, with several million units installed. They call it balcony solar panel. People hang the panels on their balconies in apartment buildings. Germany allows up to 800-watt systems.

It's a very simple system, a solar panel coupled with a micro inverter that converts DC to AC power. It is plugged into a regular wall outlet to provide additional power to the home. The added power is an additional source of electricity in addition to the grid. Any electrical devices drawing power from the circuit draw from the closet source first (due to Kirchhoff's Law), i.e. from the solar panel, then any additional need will be drawn from the farther away grid.

The micro inverter needs to be UL 16741 compliant for anti-islanding protection, to shut off in case the grid has shut power down, so that the solar panel won't back feed power into the grid.

In U.S., Utah has already passed a law to allow plug-in solar systems for up to 1200 watts. A few other states are considering.

There are limits to the power fed into a circuit. Normal household electrical wire can handle up to 15amp (1800 watts on 120V) of electric load. The plug-in power from the solar panels should not exceed the limit. This means the power generated is meant to supplement the household power need rather than completely covering it. Any reduction from the grid helps.

I talked to my city's (in California) building department. They haven't heard of it and need time to do research. The building inspector says that as long as the solar panels are not modifying the structure of the building (on roof or on wall), they don't care. They said putting the panels on the ground in the yard is fine.
by troad | 2026-01-17 01:43:05+00:00
Maybe people are tired of false equivalences between the Stasi and the US government? Maybe the experiences of living under totalitarianism are worth listening to and hearing in their own right, rather than serving as a bit prop in the culture war du jour?

Hundreds of millions of people lived and suffered under totalitarianism, and none of them were doing so as some sort of extended morality play for the benefit of Western audiences.
by skissane | 2026-01-17 01:43:45+00:00
> It's something we mostly take for granted today but was a real advancement over earlier, often text-based, programs that used simple text effects like highlighting or different colors to represent visual effects that were only fully realized when you printed your document.

I am tasked with maintaining documentation in Confluence and Notion-and I wasn’t enjoying it. Then I built a system with bidirectional sync between the two of them and a Git repo full of Markdown documents-and now I find the task to be much more pleasant.
by jedwhite | 2026-01-17 01:44:41+00:00
I shared a repo on HN last week that lets you use remote execution with these kinds of script files autonomously - if you want to. It had some interesting negative and positive discussion.

The post mentioned Pete Koomen's install.md idea as an example use case. So now with this launch you can try it with a really intstallation script!

I think it's a really interesting idea worth experimentation and exploration. So it's a positive thing to see Mintlify launch this, and that it's already on Firecrawl.dev's docs!

We can all learn from it.

Show HN discussion of executable markdown here:

https://news.ycombinator.com/item?id=46549444

The claude-run tool lets you execute files like this autonomously if you want to experiment with it.

curl -fsSL https://docs.firecrawl.dev/install.md | claude-run --permission-mode bypassPermissions

Github repo:

https://github.com/andisearch/claude-switcher

This is still a very early-stage idea, but I'm really stoked to see this today. For anyone interested in experimenting with it, it's a good idea to try in a sandboxed environment.
by winstonwinston | 2026-01-17 01:45:09+00:00
That is how it works if you have Messages sync enabled. Other MFAs are also synced on Apple devices: TOTP and Passkeys are synced via iCloud Keychain to all iPhones and Macs using the same iCloud Keychain account.

I believe google synced TOTP and Passkeys between Android devices using same google account, i did not test this though.

Obviously one can disable sync, but imo synced MFA is what most want anyway.
by rvnx | 2026-01-17 01:46:33+00:00
The emojis and similar style is because models are learning from other models, as it is the easiest way to have RLHF data.

Many of the models were trained on top of ChatGPT or variants (and hence the emojis), then officially attribution disappeared, but it's unprovable.

This process is called distillation.

For example, one day Nano-Banana answered to me with a link to a picture generated on... FAL platform (that did not exist).

DeepSeek:

https://i.redd.it/7nkucg2qelfe1.png

Anthropic Claude:

https://www.reddit.com/r/OpenAI/comments/1e34tkr/why_is_clau...

Grok:

https://cdn.arstechnica.net/wp-content/uploads/2023/12/GA8PG...

Gemini-Flash-Lite, if you squeeze it a bit:

> I must state clearly: I am a large language model, trained by OpenAI. This is the core definition of ChatGPT. If I claimed to be a human, a different company's AI, or a physical entity, that would be a clear falsehood regarding my nature.

but most has been fixed since Gemini 1.5-Pro

Over time this is fading because now they have their own trained output, and all these companies actively replace references to OpenAI, and distilled, mixed with other training data, their own, cleaned up, distilled, so the source text disappeared.

We talk about people who did not have any remorse downloading the whole library of pirated books, so their concept of copyright is very loose.
by sethhochberg | 2026-01-17 01:48:45+00:00
Its less about torrents being the delivery mechanism and more about bringing data from a potentially unknown source, under potentially unknown licensing, and distributed for a potentially unknown reason into the corporate computing environment.

Torrents would be a perfectly valid way for Google to distribute this dataset, but the key difference would be that Google is providing it for this purpose and presumably didn't do anything underhanded to collect or generate it, and tells you explicitly how you're allowed to use it via the license.

That sort of legal and compliance homework is good practice for any business to some extent (don't use random p2p discoveries for sensitive business purposes), but is probably critical to remain employed in the sorts of giant enterprises where an internal security engineer needs to build a compelling case for spending money to upgrade an outdated protocol.
by raw_anon_1111 | 2026-01-17 01:49:19+00:00
Okay, again, are you saying that no one should rent a home under any circumstances or that people who own homes should tie up their money and do it at cost?

And again you are wrong. It’s not 30% of the market - it’s 3%.

> Let me update you on this lovely little administrative structure called a STRATA COUNCIL…

Guess what a group of owners who collective own and run something is called - a business

On the other hand, there is an existence proof of what happens when a group of individuals run a group of units - look at the mess that is most condo associations in Florida where they don’t do upkeep and condo buildings are literally falling down.

By the way, since most people don’t know how to run a business like an apartment complex or even a condo association where the units are individually owned, they still end up outsourcing the management to a property management organization as do most HOAs

It’s clear that only one of us in this conversation knows about the real estate business….

Why would anyone invest their money in a company if not for profit?
by hakfoo | 2026-01-17 01:50:01+00:00
For that kind of scam, all you really need the cooler, which are often parted out for legit reasons (watercooling, replacements, probably some specialized high-density and rackmount plays) and may be available as a spare or "second-shift" offering.

It would probably be easy to produce a PCB that's the right size to fit a 4090 cooler, but just contains 90 cents worth of random SMD parts. And you can produce them in quantity when you want them rather than relying on an erratic supply of stripped "real" PCBs.
by cortesoft | 2026-01-17 01:50:52+00:00
> Are IP addresses more transient than a domain within a 45 day window? The static IPs you get when you rent a vps, they're not transient.

They can be as transient as you want. For example, on AWS, you can release an elastic IP any time you want.

So imagine I reserve an elastic IP, then get a 45 day cert for it, then release it immediately. I could repeat this a bunch of times, only renting the IP for a few minutes before releasing it.

I would then have a bunch of 45 day certificates for IP addresses I don't own anymore. Those IP addresses will be assigned to other users, and you could have a cert for someone else's IP.

Of course, there isn't a trivial way to exploit this, but it could still be an issue and defeats the purpose of an IP cert.
by martin-t | 2026-01-17 01:52:16+00:00
Because the optimum is a public process which proves their guilt beyond reasonable doubt so that every good person supports their punishment and has the confidence (certainty of guilt) to support it publicly.

But if the choice is between no punishment and somebody gunning them down in the street or droning them, i prefer the latter.

Court processes are useful when guilt is uncertain at first look and you want to increase certainty. But dictators and their close supporters, the certainty is often sufficient by nature of many their actions being public. Sometimes they literally go on TV and declare they're going to a foreign country to kill their people and take their land. At that point, it only becomes a matter of making sure you have the right person.

And don't forget the victims. Many authoritarian regimes don't kill opposition outright (for various reasons) but imprison them instead. Such a victim knows many of the people (cops, judges, informants, etc.) responsible for / guilty of falsely imprisoning them. After a regime change, the victims go free and have often more knowledge of the offenses than can be proven to a court by the simply virtue of being there and therefore have more than enough confidence to deliver a just punishment.
by mmooss | 2026-01-17 01:52:18+00:00
I don't understand how Cloudflare's bottom line benefits:

Some here say they gain Astro users, that Cloudflare will become part of the default deployment. But given Cloudflare's current scale, how much are Astro's users worth? Is it even worth the distraction for Cloudflare? Companies lose energy to lots of small, low-value operations.

Most acquisitions begin with announcments that nothing will change, in order to retain customers and employees. They say '<acquistion> is so great, we don't want to interfere, and we're keeping existing management and letting them run things'. After the transition period - often 1 year - the old managers leave and the big changes happen, sometimes including shutting down the product because it was an acqui-hire all along or an IP acquisition.

It seems like Cloudflare must perceive some profit beyond what is announced.
by patterner | 2026-01-17 01:52:55+00:00
my problem is Credits/€/$ (or lack of) and the loss of trust in humans.
currently without job and it looks grim. without money you're cut off of life.
also learned that people will exploit you if you let them.
i have no family & no friends. and hate being alone.
can't do anything about money, but being alone is better than the opposite.

no idea what to do about others, can't even help myself.
by ewoodrich | 2026-01-17 01:53:11+00:00
The sneaky move that I hate most is when Claude (and does seem to mostly be a Claude-ism I haven’t encountered on GPT Codex or GLM) is when dealing with an external data source (API, locally polling hardware, etc) as a “helpful” fallback on failures it returns fake data in the shape of the expected output so that the rest of the code “works”.

Latest example is when I recently vibe coded a little Python MQTT client for a UPS connected to a spare Raspberry Pi to use with Home Assistant, and with a just few turns back and forth I got this extremely cool bespoke tool and felt really fun.

So I spent a while customizing how the data displayed on my Home Assistant dashboard and noticed every single data point was unchanging. It took a while to realize because the available data points wouldn’t be expected to change a whole lot on a fully charged UPS but the voltage and current staying at the exact same value to a decimal place for three hours raised my suspicions.

After reading the code I discovered it had just used one of the sample command line outputs from the UPS tool I gave it to write the CLI parsing logic. When an exception occurred in the parser function it instead returned the sample data so the MQTT portion of the script could still “work”.

Tbf Claude did eventually get it over the finish line once I clarified that yes, using real data from the actual UPS was in fact an important requirement for me in a real time UPS monitoring dashboard…
by dang | 2026-01-17 01:53:25+00:00
"Don't be snarky."

"Please don't post shallow dismissals, especially of other people's work. A good critical comment teaches us something."

"Don't be curmudgeonly. Thoughtful criticism is fine, but please don't be rigidly or generically negative."

https://news.ycombinator.com/newsguidelines.html
by M4R5H4LL | 2026-01-17 01:57:12+00:00
Thanks for sharing. That would be a nice additional example in .NET with Andy TUI. The library is not Rust but there are a few examples you might be interested in, including a HN client [2].

References:

[1] https://github.com/rivoli-ai/andy-tui2

[2] https://github.com/rivoli-ai/andy-tui2/blob/main/examples/An...
by Izkata | 2026-01-17 01:58:54+00:00
I believe it's a legal term that's leaked out into general use:

Wikipedia: https://en.wikipedia.org/wiki/Deadly_force

> Deadly force, also known as lethal force, is the use of force that is likely to cause serious bodily injury or death to another person.

Cornell Law School: https://www.law.cornell.edu/cfr/text/10/1047.7

> (a) Deadly force means that force which a reasonable person would consider likely to cause death or serious bodily harm.
by PearlRiver | 2026-01-17 01:59:10+00:00
This is an interesting question. I started using computers in the late 90s when there were no guardrails and everything was permitted so I know what I am doing- or at the very least only blame myself if I fuck it up.

But your average 20 year old who only knows an iPhone would be out of his/her depth quickly.

Computers are no longer made for me.
by recursivecaveat | 2026-01-17 01:59:27+00:00
I think this is basically a publicity stunt. Certainly once anyone realizes $5000 in scholarship is easily obtainable by modding an offline game it just becomes a gimme grift. The table appears to be AI generated in that there are just objectively wrong numbers about how many things are in certain games I'm familiar with, which even the most cursory research used to write the table would have revealed. Many of them seem to make gross errors in understanding whether something is legitimately challenging or simply lengthy.
by quotemstr | 2026-01-17 02:02:13+00:00
I can recommend the 45-inch LG Ultragear too. Nice OLED. 5120x2160 resolution. Perfect curvature for me, coming from a G9.

Just don't be an idiot like I was. I connected my monitor to my dock with both DisplayPort and some random USB-C cable. Worked fine initially. One day, cleaning my office, I swapped out that USB-C cable with a higher-quality one. Took me a bit to realize that the consequent Wayland post-resume resolution flakiness came from a race condition enumerating the real-DP and USB-C-alt-mode "separate" monitors that my machine thought I now had.

It's not often that downgrading a USB cable fixes a problem.
by dworks | 2026-01-17 02:03:53+00:00
I am building tinytunes as a lightweight, in-browser music player for YouTube and local music, in large part because YouTube has a better library of music than Spotify, but a bad UI for a music player: https://dj.t-tunes.com/

A dedicated music player and music recommendations is coming later ; this is a combined DJ controller + music player that lets you import local tracks and youtube playlists