MurphyA/hacker-news huggingface dataset:
by techcode | 2026-01-16 17:18:20+00:00
I haven't gotten around to experimenting with https://wiki.calculate-linux.org/templates and https://old.calculate-linux.org/main/en/calculate-assemble

TL;DR: you can pre-configure and keep updating/building new versions of your own live-boot image of Gentoo/Calculate. Which kind of get's you "previous known-good builds" just the other way around.

Oh and the other thing I also never needed to use is update/rescue of Gentoo/Calculate installation through it's flip-flopping between two root partitions.

Calculate installer by default creates two root partitions, but I've only ever used one. And so far `cl-update` never broke the system - even when I was so far behind that my version of python and glibc got masked (or maybe even removed).

Back on vanilla Gentoo - being that far behind usually meant it was easier to reinstall Gentoo from stage3 :D
by chrisjj | 2026-01-16 17:18:39+00:00
The root cause has been the explosion of generative AI tools, such as ChatGPT, being used without proper validation. Unlike legal databases, these models do not retrieve verifiable case law. They generate plausible-sounding text based on probability. As the court warned, they “may cite sources that do not exist… [and] purport to quote passages from a genuine source that do not appear in that source.”
by bflesch | 2026-01-16 17:18:45+00:00
This sounds like a very good thing, like a lot of stuff coming from letsencrypt.

But what risks are attached with such a short refresh?

Is there someone at the top of the certificate chain who can refuse to give out further certificates within the blink of an eye?

If yes, would this mean that within 6 days all affected certificates would expire, like a very big Denial of Service attack?

And after 6 days everybody goes back to using HTTP?

Maybe someone with more knowledge about certificate chains can explain it to me.
by pfdietz | 2026-01-16 17:18:48+00:00
"Old" as in "we built it and discovered it's not wanted". The French basically gave up on the idea of fast reactors (as did the Japanese, although their fast reactor program appears to have been an excuse to obtain a stockpile of separated plutonium in case they need to make bombs). There's no market for them. The Russians have continued to try, but they're selling LWRs.

The big problem with fission is that it's too expensive. Fast reactors make that main problem worse. There is no economic margin to do fancy (and expensive) things to try to address the lesser issue of nuclear waste.
by xpe | 2026-01-16 17:18:52+00:00
What are your sources?

The backing method doesn’t matter as long as it works. This is clear from good RAG survey papers, Wikipedia, and (broadly) understanding the ethos of machine learning engineers and researchers: specific implementation details are usually means to an end, not definitional boundaries.

This may be of interest:

https://github.com/ibm-self-serve-assets/Blended-RAG

> So we'd probably find an even split of people who would call this RAG or not.

Maybe but not likely. This is sometimes called the 50-50 fallacy or the false balance of probability or the equiprobability bias.

https://pmc.ncbi.nlm.nih.gov/articles/PMC4310748/

“The equiprobability bias (EB) is a tendency to believe that every process in which randomness is involved corresponds to a fair distribution, with equal probabilities for any possible outcome. The EB is known to affect both children and adults, and to increase with probability education. Because it results in probability errors resistant to pedagogical interventions, it has been described as a deep misconception about randomness: the erroneous belief that randomness implies uniformity. In the present paper, we show that the EB is actually not the result of a conceptual error about the definition of randomness.”

You can also find an ELI5 Reddit thread on this topic where one comment summarizes it as follows:

“People are conflating the number of distinguishable outcomes with the distribution of probability directly.”

https://www.reddit.com/r/explainlikeimfive/comments/1bpor68/...
by kfreds | 2026-01-16 17:19:11+00:00
He IS a hacker from the 90s. It’s an assumed name. Plenty of hackers from the 90s have pseudonyms.

> so-called creator of some encryption protocol

All evidence points to him being one of the protocol’s designers, along with Trevor Perrin.

I’ve met both of them. The first time I met Moxie and talked about axolotl (as it was called back then) was in 2014. Moxie and Trevor strike me as having more integrity and conviction than most. There is no doubt in my mind that they are real and genuine.

Interestingly enough, some of the work Trevor did related to Signal’s cryptography was later used by Jason Donenfeld in the design of WireGuard.

> It screams honeypot like nothing else.

As you can see there is plenty of evidence suggesting otherwise.
by chrisjj | 2026-01-16 17:19:15+00:00
The legal profession in England and Wales has entered uncharted territory. In a stark warning delivered by the High Court in June 2025, senior judges condemned the misuse of artificial intelligence tools by solicitors and barristers who submitted fake legal authorities in court.

The root cause has been the explosion of generative AI tools, such as ChatGPT, being used without proper validation. Unlike legal databases, these models do not retrieve verifiable case law. They generate plausible-sounding text based on probability. As the court warned, they “may cite sources that do not exist… [and] purport to quote passages from a genuine source that do not appear in that source.”
by potato3732842 | 2026-01-16 17:19:26+00:00
Once again this is a take predicated on bad assumptions.

If you're just doing something and intend to meet or exceed the rules then dealing with government enforcement apparatus is pure overhead. You were always gonna do the right thing so you gain zero upside and have to deal with a potentially capricious and unaccountable (in any practical way) enforcer which is a huge downside.

Second, the rules are chock full of 10,000ft ivory tower view type stuff that makes statistical sense but is inefficient compared to using judgment. But you can't use judgement because the whole point of code is to make everything quantitative so that idiots can inspect other idiots and parties can more efficiently bicker in court and whatnot.
by OCASMv2 | 2026-01-16 17:19:34+00:00
> Why? And how is blaming "the hysterical reaction of the left" doing that?

Leftists pushing the idea that all good aspects of western culture are white supremacy and must be dismantled would be a factor, yes.

> Bullshit. Your opinion lacks any depth or explanatory power. No serious analysis would stop here.

Crime rates in minority areas prove it.

> Reality shows otherwise. There's reason there has been increasing backlash against police violence, and it's not "the hysterical left".

The increased backlash responds to increased profitability. Just look at how much BLM leaders cash in. Most police shooting victims are white, yet there's not talk about it anywhere.

https://www.statista.com/statistics/585152/people-shot-to-de...

> that Scott Adams had become radicalized

He wasn't. That's just leftist hysteria and willfull character assassination.
by hammadtariq | 2026-01-16 17:19:39+00:00
We are building open source tooling around Web Bot Auth IETF draft, built on RFC 9421 HTTP Message Signatures (the standard Cloudflare and others are pushing).

This week we shipped the following packages for the website operators that verify signed HTTP requests so crawler and agent traffic can be tied to a private/public keypair. Once you can verify identity, you can do allowlists, rate limits, analytics, and policy enforcement at the origin or edge.

- Node verifier middleware: @openbotauth/verifier-client (Express and Next.js style)
- Python verifier: openbotauth-verifier (FastAPI and Flask)
- Zero code reverse proxy: @openbotauth/proxy
- Registry signer utilities: @openbotauth/registry-signer (Ed25519 + JWKS)
- Test crawler and key generation: @openbotauth/bot-cli
- WordPress plugin (pending WP.org review if you run WP)

Links:
- NPM org: https://www.npmjs.com/org/openbotauth
- PyPI: https://pypi.org/project/openbotauth-verifier/

We would love feedback on the threat model, replay protection approach, or how to build sub-agent identities using X509 certs.
by marcosdumay | 2026-01-16 17:19:43+00:00
> I believe dev and QA are separate skillset.

I'm not sure it's a separate skillset. You need the other side's skills all the time in each of those positions.

But it's certainly a separate mindset. People must hold different values in each of them. One just can't competently do both at the same time. And "time" is quantized here in months-long intervals, because it takes many days to internalize a mindset, if one is flexible enough to ever do it.
by jerlam | 2026-01-16 17:19:50+00:00
They are both called mixed use, but are very different in terms of implementation.

In Japan, you can start and run your own business in your your own house (like your garage), within certain limits. This is why there are businesses in Japan like tiny cafes and shops that are nonviable anywhere else.

Where you and I live, the commercial section is a completely separate unit which is usually quite large, must be rented separately, and comes with a lot of regulations.
by MontyCarloHall | 2026-01-16 17:20:22+00:00
>What are you basing this off of? Do you actually have any experience making art? Or is this just learned helplessness talking?

I've done ≥weekly life drawing classes for 20+ years, and have observed the distribution of progress people make over time. Based on my observations and conversations with my teachers, I agree that a nontrivial fraction of adults starting with zero artistic ability can be trained to an advanced degree. But a larger fraction also cannot.

>Also please stop implying I said any 12 year old can do this. I didn't.

You literally said: "It's impressive that he did it at 12, but he had years of focused practice under his belt before he did this one. Anyone can do this level of work - they just need to actually learn it." To me, that heavily implies any 12 year old with sufficient training is encompassed by that "anyone."
by sgtcodfish | 2026-01-16 17:20:27+00:00
cert-manager maintainter chiming in to say that yes, cert-manager should support IP address certs - if anyone finds any bugs, we'd love to hear from you!

We also support ACME profiles (required for short lived certs) as of v1.18 which is our oldest currently supported[1] version.

We've got some basic docs[2] available. Profiles are set on a per-issuer basis, so it's easy to have two separate ACME issuers, one issuing longer lived certs and one issuing shorter, allowing for a gradual migration to shorter certs.

[1]: https://cert-manager.io/docs/releases/
[2]: https://cert-manager.io/docs/configuration/acme/#acme-certif...
by RobinL | 2026-01-16 17:20:34+00:00
It is true that for json and csv you need a full scan but there are several mitigations.

The first is simply that it's fast - for example, DuckDB has one of the best csv readers around, and it's parallelised.

Next, engines like DuckDB are optimised for aggregate analysis, where your single query processes a lot of rows (often a significant % of all rows). That means that a full scan is not necessarily as big a problem as it first appears. It's not like a transactional database where often you need to quickly locate and update a single row out of millions.

In addition, engines like DuckDB have predicate pushdown so if your data is stored in parquet format, then you do not need to scan every row because the parquet files themselves hold metadata about the values contained within the file.

Finally, when data is stored in formats like parquet, it's a columnar format, so it only needs to scan the data in that column, rather than needing to process the whole row even though you may be only interested in one or two columns
by lvl155 | 2026-01-16 17:20:38+00:00
I use DuckDB for nearly everything data related because it’s simply the most scalable format/tool/lib from a handful of rows to billions. It can handle it and I don’t need to do anything special on top. I’ve been a big proponent of doing everything in SQL for awhile now. It’s the most recyclable AND least error prone way of working with data.
by Altern4tiveAcc | 2026-01-16 17:20:44+00:00
> that is an extremely fringe belief that basically no one in the USA supports

Clearly is it not a belief that no one in the USA supports, as seem in the discourse against ICE and immigration contrl.

> The debate is on "how" it's being done not that we shouldn't have immigration control.

Not necessarily, no. "The debate" is too vague to elaborate in favor or against what you're saying.

But yes, there are people against immigration control period, and period in favor of reforms to make immigration easier for workers, not harder. But propaganda will keep putting workers against each other, instead of companies lobbying against workers.
by GolDDranks | 2026-01-16 17:20:58+00:00
It helps if you think that there are only three kinds of hands:

- 25 fu hand (chiitoitsu) 16 / 32 / 64

- 30 fu hands: 10 / 20 / 39 / 58

- 40 fu hands (especially toitoi, but also some others with koutsu's) 13 / 26 / 52

As long as you don't have any kans (and you mostly shouldn't call those), the others are a rounding error.
by ortusdux | 2026-01-16 17:21:27+00:00
"Canada has agreed to allow an annual quota of 49,000 Chinese electric vehicles into the country at the tariff rate of just 6.1%"

https://electricautonomy.ca/data-trackers/ev-sales-data/2025...

"Canada recorded 45,366 new zero-emission vehicle registrations in Q3 2025, accounting for 9.4 per cent of all new vehicle registrations in the quarter, according to the latest report from Statistics Canada."

"Of the total, 26,792 units were battery-electric vehicles (BEVs), while 18,574 were plug-in hybrid electric vehicles (PHEVs). "

So this would represent about 1/4 of current annual EV sales.
by willmarch | 2026-01-16 17:21:49+00:00
‘“We were there for a check-in and the original officer said, ‘This looks good, I’ll be right back,’” Prokosch said. “And then there was a lot of chaos, and about five officers came out and then they said, ‘We’re going to be taking him back into custody.’ I was like, ‘Really, you want to do this again?’”’
by gigatexal | 2026-01-16 17:22:00+00:00
89luca89 mentioned that MacOS support was not in scope here: https://github.com/89luca89/distrobox/issues/1697

100% their prerogative and will respect it if they come down hard against on this.

but I've loved the project since my time on Linux and wanted the same in Mac land. I've just been too skittish to try... I had Claude help me cuz I figured if Linus could do a side project with some LLM prompting maybe I could, too.

Anyway, added some tests, got an MVP working, and started using it for my own use-cases at work the same day.
by embedding-shape | 2026-01-16 17:22:02+00:00
The second top comment is my own (skeptical) comment, with 20 points at this moment. Thanks to those 20 people, I felt compelled to write the blog-post in this submission, and try to ask a bit clearer "what is going on?", since apparently we're at least 20 people who is wondering about this.

There is also clearly a lot of other skeptical people in that submission too. Also, simonw (from that top comment) told me themselves "it's not clear that what they built even runs": https://bsky.app/profile/simonwillison.net/post/3mckgw4mxoc2...
by publicdebates | 2026-01-16 17:22:06+00:00
On one hand, I always want to keep an open mind about religion and politics, and I'm always interested in hearing what others are passionate about, even if it's in those topics. That's how I've learned so much of what I have.

If everyone followed the rule of avoiding these topics, I wonder how many people would never hear an opposing opinion, maybe even a more beneficial one, to the one they've grown up with. I think these topics should be encouraged.

That said, the moment you disagree with someone on one of these topics, some people will definitely fly into a small rage, or instantly cut off contact with you, or even slander you to others, or some mix of these.

Ultimately, I think that's fine. For one thing, you have just learned that this is someone you probably don't want in your life anyway, because they can't handle disagreement in a civil way.

And you learned it fairly quickly and at a small cost. Even if they slander you, people whose opinions you'd actually care about will generously take their word with a large dose of salt, especially based on their character, since such a character usually has other tells too.

So my current stance is to just be open to these topics.

Just yesterday, while I was sitting here at the library, someone approached me and asked me to watch his phone while he used the restroom, in case ICE came in and took it. He was joking, but we went into a slight conversation about politics in general, in which we found out that we disagree on certain topics, and he almost took offense at me disagreeing. I was friendly and open to him the whole time, and he was friendly when he left to use the restroom. But when he came back and sat back down, and later left the whole library, he left without even so much as a goodbye or wave. It seems like he just didn't like me anymore because of my disagreement. And that's fine with me. Both would have been fine.
by SecretDreams | 2026-01-16 17:22:38+00:00
This is for about 50k cars a year that are priced about 35k CAD or less. It's a small amount compared to Canada's 2mil car sales a year, but it is quite significant in the message it is delivering to the world about Canada being willing to diversify their economy in the wake of hostility from conventional partners. It'll be quite interesting how normal partners react.
by tim333 | 2026-01-16 17:22:38+00:00
The arguments that "AI Destroys Institutions" seem pretty iffy. I scrolled down to see what institutions had been destroyed it went on about Elon Musk's Doge destroying stuff but their closing say USAID I think had zero to do with AI.

I'm in the UK and I don't think any institutions have been destroyed or even noticeably harmed by AI. In the US there is general chaos under Trump so it may be hard to differentiate.
by pbhjpbhj | 2026-01-16 17:23:21+00:00
I mean, yes ...?

Stupid to run random scripts you find online, but browser makers push users into it.

My son wants to eat "Chinese" food with chopsticks, but he can only really use a fork, so we adapt the chopsticks. He'll be able to use them eventually, but not everyone has a) the desire, nor b) the dexterity.

Making it easier to do what users want with a computer without telling them 'just learn to program' (or script in this case) is actually a good thing imo.
by pattar | 2026-01-16 17:23:31+00:00
I went to a talk by the Motherduck team about why they built DuckLake instead of leaning more in on Iceberg. The key takeaway is that instead of storing all the table metadata inside files on s3 and dealing with latency and file io they instead store all of that info inside a duckdb table. Seems like a good idea and worked smoothly when I tried, however it is not quite in a stable production state it is still <1.0. They have a nice talk about it on youtube: https://youtu.be/hrTjvvwhHEQ?si=WaT-rclQHBxnc9qV
by footy | 2026-01-16 17:25:01+00:00
I'm AuDHD and I think the marked for products to help with ADHD that do not actually work for anyone except for the person who came up with them is absolutely saturated. I think what I've come to realize is that the process of building a system is at least as important as the system itself. This means nothing designed by someone who is not me will really work for me, and that's that. I suppose a lot of money can be made off of people who have not yet realized this.

I also have to say something about the "for those who feel stuck... indy will be your compass" reads incredibly fucking dystopian to me.
by pdntspa | 2026-01-16 17:25:05+00:00
Ideally, sure. But in some places you're what you're proposing is like trying to boil the oceans to make a cup of tea

VBA et al succeeded because they enabled workers to move forward on things they would otherwise be blocked on organizationally

Also - not seeing this kind of thing could be considered a gap in your vision. When outsiders accuse SV of living in a high-tech ivory tower, blind to the realities of more common folk, this is the kind of thing they refer to.
by jeroenhd | 2026-01-16 17:25:19+00:00
One thing this can be useful for is encrypted client hello (ECH), the way TLS/HTTPS can be used without disclosing the server name to any listening devices (standard SNI names are transmitted in plaintext).

To use it, you need a valid certificate for the connection to the server which has a hostname that does get broadcast in readable form. For companies like Cloudflare, Azure, and Google, this isn't really an issue, because they can just use the name of their proxies.

For smaller sites, often not hosting more than one or two domains, there is hardly a non-distinct hostname available.

With IP certificates, the outer TLS connection can just use the IP address in its readable SNI field and encrypt the actual hostname for the real connection. You no longer need to be a third party proxying other people's content for ECH to have a useful effect.
by embedding-shape | 2026-01-16 17:25:24+00:00
The argument isn't what OpenAI/Anthropic are selling their users, what I said was:

> are definitively capable tools when used in certain ways

Which I received pushback on. My reply is to that pushback, defending what I said, not what others told you.

Edit: Besides the point, but Ableton (and others) constantly tell people how to learn how to use the tool, so they use it the right way. There is a whole industry of people (teachers) who specialize in specific software/hardware and teaching others "how to hold the tool correctly".
by traceroute66 | 2026-01-16 17:25:31+00:00
> and it's not clear why you'd want to

The biggest modern-era reason is direct access to update your RPKI entries.

But this only matters if you are doing stuff that makes direct access worthwhile.

If your setup is mostly "set and forget" then you should just accept the lag associated with needing to open a ticket with your sponsor to update the RPKI.
by LgWoodenBadger | 2026-01-16 17:25:52+00:00
To see extreme examples of this, look at any wallowed-out/wallered-out through-bore in construction equipment (e.g. excavator buckets), particularly when a pin hasn't been greased, or is seized.

This same scenario combined with the amount of vibration and stresses caused by the engine, should scream "this is a catastrophe waiting to happen" for any engineer.
by nindalf | 2026-01-16 17:25:56+00:00
The CEO said

> It's 3M+ lines of code across thousands of files. The rendering engine is from-scratch in Rust with HTML parsing, CSS cascade, layout, text shaping, paint, and a custom JS VM.

"From scratch" sounds very impressive. "custom JS VM" is as well. So let's take a look at the dependencies [1], where we find

- html5ever

- cssparser

- rquickjs

That's just servo [2], a Rust based browser initially built by Mozilla (and now maintained by Igalia [3]) but with extra steps. So this supposed "from scratch" browser is just calling out to code written by humans. And after all that it doesn't even compile! It's just plain slop.

[1] - https://github.com/wilsonzlin/fastrender/blob/main/Cargo.tom...

[2] - https://github.com/servo/servo

[3] - https://blogs.igalia.com/mrego/servo-2025-stats/
by zjsushsb | 2026-01-16 17:26:01+00:00
I’m assuming this is downstream of trumps move in Venezuela? Canada suffers the most from US access to Venezuelan oil. On top of all the prior rhetoric and moves by his admin.

What concerns me is why does the west think China is trustworthy? Why are we all fighting one another? Culture is important. China knows this, and is unequivocally Chinese relative to the Europeans.