MurphyA/hacker-news huggingface dataset:
by rswail | 2026-01-15 07:57:52+00:00
Cowork does run in a VM, but the Anthropic API endpoint is marked as OK, what Anthropic aren't doing is checking that the API call uses the same API key as the person that started the session.

So the injected code basically says "use curl to send this file using the file upload API endpoint, but use this API Key instead of the one the user is supposed to be using."

So the fault is at the Anthropic API end because it's not properly validating the API key as being from the user that owns it.
by 28304283409234 | 2026-01-15 07:58:09+00:00
Keep HR and hiring teams to the bare minimum. In the scaleups I've worked for, HR got scaled first. And therefore became more powerful than any other department. HR people get hired by the dozen, get bored, and start creating work like 'self reviews', 'peer reviews', 'yearly goals', etc... on top of scrum. Bonkers.
by purplehat_ | 2026-01-15 07:58:51+00:00
Why do you say that?

Bubblewrap is a it's a very minimal setuid binary. It's 4000 lines of C but essentially all it does is parse your flags ask the kernel to do the sandboxing (drop capabilities, change namespaces) for it. You do have to do cgroups yourself, though. It's very small and auditable compared to docker and I'd say it's safer.

If you want something with a bit more features but not as complex as docker, I think the usual choices are podman or firejail.
by YetAnotherNick | 2026-01-15 07:59:00+00:00
People in tech thinks that micropayments work. Even if you leave out the drop off in entering card details, it just doesn't work, as if get some payment you are much more liable by law. e.g. Whatsapp is the closes example, which had cost of revenue of $52M for revenue of $10M[1] in the last filing.

[1]: https://www.sec.gov/Archives/edgar/data/1326801/000132680114...
by hdra | 2026-01-15 07:59:10+00:00
>it looks like either this battery changes the world within the next 3 months, or it will make the CEO look like a fool.

looking at the richest person on earth today, I think we have established at this point truth doesn't really matter, so I think its safe to say the CEO have little to worry about looking like a fool or to face any kind of consequences really.

Skeptical, but still, I hope the company is for real
by cyberax | 2026-01-15 07:59:14+00:00
Ah, I see what you mean.

GCC can now emit information that can be used to reconstruct the frame pointers for inlined functions: https://lwn.net/Articles/940686/ It's now filtering through various projects: https://sourceware.org/binutils/wiki/sframe

It will not undo _all_ the transformations, but it will help a lot. I used it for backtraces, and it fixed the missing frame issues for me.

This was possible with the earlier DWARF format (it's Turing-complete), and I think this is how VCC does it. Although I have not checked it.
by andris9 | 2026-01-15 07:59:15+00:00
For persistent, high-throughput traffic, Muti Metroo maintains long-lived connections and multiplexes multiple logical streams over a single peer link, each with independent flow control. This works well for token streaming, where low latency matters more than raw bandwidth. In residential networks, QUIC is usually the best choice, with HTTP/2 and WebSocket also available.

Service discovery is handled via the port-forwarding model. A node can advertise a named endpoint (e.g. an Ollama instance), and another node can bind a local listener to that key. The mesh routes traffic end-to-end encrypted, so from the client’s perspective it behaves like a local port even though the service is remote.

For distributed inference, the main constraints are latency and hop count - extra hops add delay, which is fine for background work but relevant for interactive use. Everything runs in userspace, and outbound connections plus QUIC make it usable behind typical residential NATs.
by nixass | 2026-01-15 07:59:22+00:00
> So many vehicles, especially in the truck space, are almost indistinguishable and lack any kind of imagination.

Because utilitarian design and purpose of this vehicles has been established long time ago.
Cybetruck "wanted to be different" but it fails in every aspect of its own "innovation". It's ultimately stupid vehicles with so many flaws that arguing it tried something is pointless. Like, having a man walking to North Pole in runners - he's not trying something new, he's straight stupid and should be treated like that
by beng-nl | 2026-01-15 07:59:41+00:00
This is a tangent, because it clearly didn’t pan out, but I had hope for rust having an edge when I learned about how all objects are known to be immutable or not. This means all the mutable objects can be held together, as well as the immutable, and we’d have more efficient use of the cache: memory writes to mutable objects share the cache with other mutable objects, not immutable
Objects, and the bandwidth isn’t wasted on writing back bytes of immutable objects that will never change.

As I don’t see any reason rust would be limited in runtime execution compared to c, I was hoping for this proving an edge.

Apparently not a big of an effect as I hoped.
by dochtman | 2026-01-15 07:59:42+00:00
I think the way Rust checks borrows also makes it a lot more feasible to avoid allocations/copies; not because it is impossible to do in C, but because doing it in C requires writing very careful documentation and the caller to actually read that documentation. In (safe) Rust this is all checked by the compiler such that libraries can leverage it without blowing their complexity budget.
by PunchyHamster | 2026-01-15 07:59:58+00:00
I'd imagine that % changes heavily on hour in the day and road observed.

People using truck for work (tradesman etc) do it all thorough the day. People who just use it as status symbol get to work and back from work at given hour. Also probably more usage in weekend when people doing weekend project go shop and people not doing that don't even get out on the longer trips.

Sitting on one road for an hour (and looking at photos, far from peak traffic) is near meaningless
by omgmajk | 2026-01-15 08:00:57+00:00
I explored the programming language nim a bit deeper for use in game programming with SDL3 bindings, but I came to find out that compiled nim code on Windows often triggers anti-virus because, from what I hear from people, nim is used a lot in malware development currently. Which is a shame because I really like that language. I haven't tested it myself, it's just things I have heard and read. Someone on r/gamedev told me to write the code in nim, generate C code and then compile it with zig cc.

If anyone has any experience with this, please do chime in :)
by troupo | 2026-01-15 08:01:58+00:00
Safari's dev tools are infuriatingly cumbersome in comparison to Chrome. They go out of their way to make even the simplest actions hidden in multiple selects and popup menus. I even made a screencast of it: https://x.com/dmitriid/status/1711701552082079764

As a browser? I agree with you.
by dwaite | 2026-01-15 08:02:45+00:00
That would be what is referred to as a market for lemons.

Apple tries extremely hard to be durably differentiated from products in the same category to avoid being dragged down in a price war to have cheap quality.

That in turn makes it hard for others to compete with them - you don't have differentiating features that would pull existing users off a mature product like iPad, and you can't come out with a cheaper product without discriminating consumers being concerned that it is fragile, clunky, and/or incomplete.
by gyrovague | 2026-01-15 08:03:26+00:00
Gyrovague here, author of the targeted blog post:

https://gyrovague.com/2023/08/05/archive-today-on-the-trail-...

In the past week or so, I have received a GDPR takedown attempt of the archive.today blog post (which my hosting provider rightly rejected), a politely worded request to take it down (which was sadly eaten by my spam filter), and now this (thanks to the HN reader who tipped me off).

Given that the proverbial cat has been out of the bag for 2.5 years at this point, I'm genuinely puzzled as to what they're hoping to achieve, but this does not seem like a very good way of going about it.
Ask HN: Are you worried, and care, about AI stealing your code/secrets?
by fnoef | 2026-01-15 08:03:47+00:00
Recently, I started to use AI coding agents. They are really great, and I feel like this is the best $100 month I spend for my career.

And yet, I understand that I don’t fully know how they work and what they do behind the scenes. I know the general gist of how an agent works, but I don’t really know if they don’t cat .env behind the scenes, or whether someone on the other side of the planet gets pieces of my code in their AI response.

This is the reason I use AI mainly at $JOB, but not on my personal project (in addition to keeping my skills sharp, and the fun factor). Do you ever think about this? Do you care?
by torginus | 2026-01-15 08:04:03+00:00
I'm kinda surprised how negative and skeptical anyone is here.

It kinda blows my mind that this is possible, to build a browser engine that approximates a somewhat working website renderer.

Even if we take the most pessimistic interpretation of events ( heavy human steering, relies on existing libraries, sloppy code quality at places, not all versions compile etc)
by Closi | 2026-01-15 08:04:09+00:00
For day-to-day coding, why use your own half-baked solution when the commercial versions are better, cheaper and can be customised anyway?

I've written my own agent for a specialised problem which does work well, although it just burns tokens compared to Cursor!

The other advantage that Claude Code has is that the model itself can be finetuned for tool calling rather than just relying on prompt engineering, but even getting the prompts right must take huge engineering effort and experimentation.
by p_v_doom | 2026-01-15 08:05:33+00:00
> I’m reading Domain Driven Development and learning why so many of my projects have been tough to maintain.

Oooh, thats a good one. Next read the Architects paradox, Why Greatness cannot be planned and Understanding Variation and your views of the world will be forever altered. Or pick up "Architecture Modernization" by Nick Tune if you want more tools to do stuff and if you do not want to achieve enligntenment.

_____

Where did you acquire cheap ancient coins? ebay? May be cool to get some for my dnd group
by saghm | 2026-01-15 08:06:49+00:00
If you think that literally no one is motivated by making more money than the minimal amount they need to survive, how do you explain rich people who still work? UBI isn't a proposal to make salaries illegal, so the problem of "how do we financially motivate people to work" isn't going to change if people happen to get a subsistence wage without employment. The assumption that there's a binary of "people will either be motivated to work or they won't" is nonsensical; there's a entire spectrum of what motivates different people (and how much they're motivated by them). Some people who work now might stop under a system of UBI, but plenty still would continue to. There's a fair question about what the correct amount of money for this is to balance things properly, but without the flawed assumption that motivation is a binary, I don't think the answer is nearly as obvious as you imply.
by pbmonster | 2026-01-15 08:07:06+00:00
> I would feel very uncomfortable towing an empty 4x6 trailer behind my sedan, not to even mention the occasional couch or dresser or bunch of boxes from helping a friend move.

Why? 1500 lbs rated tow hook on an average sedan should be no problem at all. And that's more than enough for a 4x6 with a couch and a couple of boxes. Might even get a slightly larger trailer so you don't have to take the couch apart.

I've towed 14' sailboats including all gear behind a Corolla, didn't even feel the trailer was there.
by dwattttt | 2026-01-15 08:07:28+00:00
> Say the program is not dynamically linked. Still no?

Whether the program has dynamic dependencies does not dictate whether a thread can be created, that's a property of the OS. Windows has CreateRemoteThread, and I'd be shocked if similar capabilities didn't exist elsewhere.

If I mark something as thread-local, I want it to be thread-local.
by kundan_s__r | 2026-01-15 08:08:09+00:00
That’s a very real example of the core problem: LLMs don’t reliably honor constraints, even when they’re explicit and simple. Instruction drift shows up fast in learning tasks — and quietly in production systems.

That’s why trusting them “agentically” is risky. The safer model is to assume outputs are unreliable and validate after generation.

I’m working on this exact gap with Verdic Guard (verdic.dev) — treating LLM output as untrusted input and enforcing scope and correctness outside the model. Less about smarter prompts, more about predictable behavior.

Your Spanish example is basically the small-scale version of the same failure mode.
by gyrovague | 2026-01-15 08:09:10+00:00
Blog post author here. Nope, I was just curious, since it's quite remarkable how huge archive.today is, how widely it's used, and how little we know about it. I do acknowledge the irony of an archiver being upset by an archive of their own work though :)

All that said, the post does not actually dox anyone (as far as I can tell, every name mentioned is an alias or red herring), and the "investigation" was basically punching things into my favorite search engine and seeing what came up. If a nation state level threat actor or even one of the copyright cabals wanted to find the maintainer, they have much better ways of going about it.
by kundan_s__r | 2026-01-15 08:09:14+00:00
That framing resonates a lot. In production, creativity is often just unbounded variance.

Once each step is intentionally boring and constrained, failures become predictable and debuggable — which is what engineering actually optimizes for. That tradeoff is almost always worth it.

I’m building Verdic Guard (verdic.dev) around the same idea: treat LLMs as creative generators, but enforce scope and correctness outside the model so systems stay calm under load.
by dwaite | 2026-01-15 08:10:09+00:00
The battery life is sufficient that I never feel the need to leave it umbilical-ed to an outlet across the room. I'll leave it docked at my desk, or use it wirelessly, or charge it at a conference room table, or recharge it after the day is done in my hotel room as I sleep.

Thats the real difference - it now easily lasts until I would want to take an extended break anyway.
by bjackman | 2026-01-15 08:10:22+00:00
I really don't understand why people have all these "lightweight" ways of sandboxing agents. In my view there are two models:

- totally unsandboxed but I supervise it in a tight loop (the window just stays open on a second monitor and it interrupts me every time it needs to call a tool).

- unsupervised in a VM in the cloud where the agent has root. (I give it a task, negotiate a plan, then close the tab and forget about it until I get a PR or a notification that it failed).

I want either full capabilities for the agent (at the cost of needing to supervise for safety) or full independence (at the cost of limited context in a VM). I don't see a productive way to mix and match here, seems you always get the worst of both worlds if you do that.

Maybe the usecase for this particular example is where you are supervising the agent but you're worried that apparently-safe tool calls are actually quietly leaving a secret that's in context? So it's not that it's a 'mixed' usecase but rather it's just increasing safety in the supervised case?
by arcticbull | 2026-01-15 08:10:39+00:00
> A pickup truck should just be max utility, especially if you're a manufacturer making your first one

> 75 percent of truck owners use their truck for towing one time a year or less (meaning, never). Nearly 70 percent of truck owners go off-road one time a year or less. And a full 35 percent of truck owners use their truck for hauling—putting something in the bed, its ostensible raison d’être—once a year or less.

[1] https://www.thedrive.com/news/26907/you-dont-need-a-full-siz...
by aaronbrethorst | 2026-01-15 08:11:21+00:00
My home office gets up to about 1500ppm of CO2 by the end of the workday, which explains a lot about why I often feel exhausted after the end of a long, uninterrupted session in there (especially when I’m on back to back zoom calls).

I now have several plants in there that are supposed to be especially good at sucking up CO2, and my sensor reports that the current level is slightly below atmospheric ambient CO2 levels.

I also wrote up a blog post about the structure of the Washington state legislature, which began its sixty day session for 2026 earlier this week. https://www.brethorsting.com/blog/2026/01/how-the-washington...
by general1465 | 2026-01-15 08:11:23+00:00
> That seems like a warmed-over 90s perspective that's long past its sell-by. Aren't there "far right" parties in power or nearly in power in much of Europe, and at least one European country that's totally dominated by one?

Not even close. European politics is by design coalition politics there is no voting blue or red, you are voting for a party and if party has certain amount of votes it will get into parliament (except UK).

The thing is that you would need absurd amount of votes to get more than half of seats in parliament and govern as a single party. So what is normal in USA (one party rule) is exceptionally rare in Europe.

So even if you "win" elections, you need to establish coalitions with less extreme parties to actually achieve majority in government and to be able to modify laws. This will average out your program and will cut down extreme edges on both sides.
by flowerthoughts | 2026-01-15 08:11:40+00:00
> Our credibility with Europe, already strained, will continue to erode if the world sees that American leadership is unwilling or unable to check reckless behavior.

As a European without political ties, I already consider the US a failed democratic state. It has a bully running the country, and no one seems to have the guts, ability, or interests, to fix that. The US constitution gives the president _way_ too much power for a position that can, essentially, be bought.
by Gerharddc | 2026-01-15 08:11:59+00:00
Great writeup! An alternative I have explored (more for defense against supply-chain attacks than for agents admittedly) is to use rootless Podman to get a dev-container-like experience alongside sandboxing. To this end I have built https://github.com/Gerharddc/litterbox (https://litterbox.work/) which greatly simplifies container setup and integrates a special ssh-agent for sandboxing that always prompts the user before signing requests (as to keep your SSH keys safe).

Unfortunately Litterbox won't currently help much for specifically protecting .env files in a project folder though. I'd need to think if the design can be extended for this use-case now that I'm aware of the issue.
Show HN: Semantic search for MTG
by Strift | 2026-01-15 08:12:19+00:00
I play MTG (Magic: The Gathering) and find the quality of AI tools in the space quite low.

The reliability isn’t there, and the overpromises (e.g., automated deck building) vs. the reality (pulling 100 cards from EDHrec) lead to a negative reception. This contributes to the community feeling that AI just outputs slop because “it doesn’t get” Magic.

I’m trying to improve the status quo by using RAG, and I found it brings better results than most “smart search” tools.

Feedback welcome :)
by viraptor | 2026-01-15 08:12:20+00:00
You need to run them sandboxed in some way. Docker is one kind of solution, selinux / apparmor / sandbox-exec is another. Basically, create an environment where .env is not accessible in any way and you don't have to worry about it anymore.

I don't care about it reading the code itself. 90% of my usage is on opensource projects anyway. The other - if I can generate something, then there's no barrier to someone else doing the same - I'm just making applications that do expected things, not doing some groundbreaking research.
by tomhow | 2026-01-15 08:12:33+00:00
Please don't hound people like this on HN. It's not acceptable to say “I remember you doing exactly that in many, many threads before” and “you're always trying to protect unsavory characters”. It's hyperbolic and unfalsifiable, and not the kind of discourse that HN is intended for. Commenters have the right to have their comments evaluated as they are in the thread, and not coloured by wild allegations of conduct in unspecified historical threads.

The purpose of HN is to gratify intellectual curiosity. Plenty of users are doing a good job of discussing this difficult topic curiously. We want this to a site where difficult topics can be discussed, and that can only happen if people are committed to curious conversation rather than ideological battle.

If you want to participate on HN, we need you, like everyone, to respect the guidelines, no matter how difficult and activating the topic is.

These lines from the guidelines are particularly relevant here:

Be kind. Don't be snarky. Converse curiously; don't cross-examine. Edit out swipes.

Comments should get more thoughtful and substantive, not less, as a topic gets more divisive.

When disagreeing, please reply to the argument instead of calling names. "That is idiotic; 1 + 1 is 2, not 3" can be shortened to "1 + 1 is 2, not 3."

Please don't fulminate. Please don't sneer, including at the rest of the community.

Please respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize. Assume good faith.

Eschew flamebait. Avoid generic tangents. Omit internet tropes.

Please don't use Hacker News for political or ideological battle. It tramples curiosity.

https://news.ycombinator.com/newsguidelines.html
by fnoef | 2026-01-15 08:13:34+00:00
It’s not only about the .env, but also intellectual property, algorithms, even product ideas.

Moreover, let’s say you run a dev server with watch mode, and ask claude to implement a feature. Claude can generate a code that reads your .env (from within the server) and send to some third party url. The watch mode would catch it and reload the server and will run the code. By the time you catch it, it’s too late. I know it’s far fetched, and maybe the paranoia is coming from my lack of understanding these tools well, but in the end they are probabilistic token generators, that were trained on all code in open existence, including malware.
by arcticbull | 2026-01-15 08:13:42+00:00
> According to Edwards’ data, 75 percent of truck owners use their truck for towing one time a year or less (meaning, never). Nearly 70 percent of truck owners go off-road one time a year or less. And a full 35 percent of truck owners use their truck for hauling—putting something in the bed, its ostensible raison d’être—once a year or less.

> So what do people actually like about trucks? According to Edwards, the answer is counterintuitive. Truck drivers use their trucks very much like other car owners: for commuting to and from work, presumably alone. The thing that most distinguishes truck owners from those of other vehicles is their sheer love of driving. “The highest indexed use among truck owners is pleasure driving,” says Edwards. Truck drivers use their vehicles this way fully twice as often as the industry average. “This is the freedom that trucks offer,” says Edwards.

https://www.thedrive.com/news/26907/you-dont-need-a-full-siz...

The F-series is the best selling car family in the US. Some of them are using it for its intended purpose sure, the majority are just using it as parent said, a luxobarge.