MurphyA/hacker-news huggingface dataset:
by lxgr | 2026-01-09 10:09:10+00:00
That's largely a myth these days.

> Debit cards do not share these protections by law

No, debit cards are covered by Regulation E, which also caps liability for fraudulent transactions, requires your issuer to provide provisional credit until the dispute case has been resolved etc.

The only practical difference in terms of the minimum fraud protections afforded by law is that you're out your own money instead of the bank's until you get that provisional credit, which can be a problem if it causes other transactions (utility bills etc.) on your checking account to bounce.

Where the two really differ significantly is for non-fraud disputes (goods/services not as expected etc.): Reg Z has explicit protections there; Reg E doesn't really talk about these.

But practically, it also doesn't really, because...

> though many banks offer some of them).

No, both Visa and Mastercard require require issuers to extend zero liability protections going beyond these regulations, so it's effectively all banks. (Capital One might be able to relax their own rules now that they own Discover, but I highly doubt they'd risk the consumer backlash for questionable benefit, since they can also just make merchants pay for card-not-present lost/stolen/card credential theft fraud and cover card-present fraud like everybody else in the US.)
Show HN: EME – making LLM reasoning inspectable via controlled perturbations
by kmelkumyan | 2026-01-09 10:09:49+00:00
Hi HN,

I’ve been working on a small research prototype called Epistemic Motion Engine (EME).

The idea is simple: instead of treating an LLM answer as a verdict, treat reasoning as a process you can observe.

Given a prompt (decision, claim, plan, or messy situation), EME runs the model through a sequence of small, controlled perturbations: assumption stress-tests, counterfactual shifts, and alternating consolidation vs. challenge. It records what stays stable, what breaks, where uncertainty grows, and what evidence would actually change the direction.

The output is a trace you can inspect. There are no hard-coded reasoning rules and it’s model-agnostic. The goal is not to “improve” answers, but to make uncertainty and load-bearing assumptions visible.

This is an early research prototype, not a product. I’m especially interested in failure modes: where this adds signal vs. where it’s just noise or model artifacts.

Public demo (no login, uses real models):
https://eme.eagma.com

I’d appreciate blunt technical feedback, especially from people working on evals, interpretability, or reasoning under uncertainty.
by breezenik | 2026-01-09 10:10:18+00:00
OP here. We've been building agentic tools and realized we were all solving the same problem: passing context to the LLM. We standardized a folder structure (.ai/) and a "boot protocol" that lets any agent (Cursor, Claude, etc.) read project state from markdown files in the repo, effectively giving the repo its own memory.

We also built a CLI (corepackai) to install these "Context Packs" like npm packages, and a Marketplace to share them (e.g. installing standard Next.js patterns or AWS architecture contexts).

We just released the full spec and would love feedback on the architecture.
by Roark66 | 2026-01-09 10:10:56+00:00
While I agree with the sentiment I'm not sure this is actually viable.

For example here in Poland the previous govt invested in huge amount of software for digital govt services. From company formation, social insurance/heathcare (things like electronic prescriptions and patient data) to tax submission at all levels.

All of this is implemented using publicly documented open standards so anyone can write a client for these services, or anyone can use official Web clients, but none of the code is open source.

This is in contrast to previous governments that tried to implement all of this using proprietary standards where the companies hired were paid billions to deliver a system and they ended up owning the data exchange protocol and a client they distributed in binary only form. And they also profited from commercial software that implemented their proprietary protocols.

That worked (for the company hired)for taxes and they made billions. But for other stuff like medical, when they had no way to sell their proprietary standards they wasted billions and years of time and delivered nothing. Then subsequent govt threw the entire project out and built it on open standards.

So based on this experience I think using well documented open data exchange standards is much more important than software itself being open source.

Who cares the server side software is open source if you still can't submit your taxes with your own python script?
by SeanAnderson | 2026-01-09 10:11:20+00:00
Honestly, I created the two-email setup at a different time in my life. After the hack, I decided it was easier and more desirable to just use one address. My works speak more for me than a firstname.lastname email now that I've gained some life experience.

I haven't considered looking into other email alias tools. The whole area wasn't something I had put much thought into after getting things the way I wanted a decade prior.

In email, I have used the "+" format in some situations where I'm curious if a third-party is going to leak my contact details. It's not something I use every day, but it is a useful tool, I agree.

The problem with getting a Google account hacked is that Google, by default, really wants to save your passwords for you. So, even though I keep passwords in KeePass, plenty of them ended up remembered inside Chrome, too. Once the hacker compromised the Google account I had to assume every website listed in my password manager needed to be rotated. Plus, I had to change every account that I registered using my "firstname.lastname" email - so I was basically already sold on needing to have to revisit every website I'd ever used.
by Epa095 | 2026-01-09 10:12:24+00:00
People often use it instead of 'raises the question'. E.g "There was very little fallout to the Y2K bug, which begs the question: was the Y2K crisis real and well handled or not really a crisis at all?"

E.g https://hn.algolia.com/?q=%22begs+the+question%22
by charcircuit | 2026-01-09 10:13:07+00:00
>you can produce very small binaries, for example with C

Not many people are going to want to be rolling their own libc like that author. Most people just compile their app and ship megabytes of webassembly at the expense of their users. To me webassembly is just a shortcut to ship faster because you don't have to port existing code.
by llmslave2 | 2026-01-09 10:13:52+00:00
It's embarrassing because they use Claude Code to build all of their software and they can't write decent software to save their lives. Their software quality is embarrassing, basically Microsoft tier, which calls into question both the effectiveness of their AI products and Agentic workflows.

Like seriously, the creator of CC claims to run 10 simultaneous agents at once. We sure can tell bud.
by aebtebeten | 2026-01-09 10:13:52+00:00
> sunk into the banana republic attractor?

κῦδος to all currently trying nonviolently* to de-banana-ice the republic for which it stands! It gives me hope, Jo'anna.

May the Force be with you!

* a parody paper reports that Greenland is already being strongly defended — with strewn Lego blocks: https://www.der-postillon.com/2026/01/legosteine-groenland.h... (It's good they're hand, not remote, laid; I trust all feasible precautions were taken to protect civilians from their effects?)
by compsciphd | 2026-01-09 10:14:43+00:00
I've said this before, but given how fast machines can boot these days, why not simply reboot into a secure boot attested environment with minimal things loading besides the game.

i.e. why not simply make it "XBox for the PC" and leverage both PC and XBox gaming together. There should be no difference to a developer of an "XBox for the PC" and XBox development besides XBox giving you an exact performance config. One codes the same, one has the same resources made available to them and so forth and then one doesn't need anti-cheat (i.e. I'm making an assumption that there's no real need for invasive anti-cheat on xbox / ps platforms).

If I was being conspiracy minded, I might argue that Microsoft doesn't do this, because if one simply reverted to a trusted/attested platform, it be easy for valve to provide the same on a steam deck. If one is booted into a trusted/attested mode on the steam deck, these games that eschew invasive anti-cheat due to trusting the platform could do the same on the steam deck if it provided such a mode. So by enabling invasive anti-cheat, they create a form of lock-in.
by B480FA8D | 2026-01-09 10:14:46+00:00
A crucial context is that this "block" is resolved (for now) via bumping version numbers. It is almost as if Anthropic deployed this to test the water on community reaction... Right now it is trivial to fingerprint opencode users without deep inspection into the conversations (privacy conerns), but Anthropic is not doing that.

https://github.com/anomalyco/opencode/commit/5e0125b78c8da09...
by thaumasiotes | 2026-01-09 10:14:57+00:00
> The creep pasting heads onto scandalous bodies is punished, not the author of Photoshop

In this case the guy making the images isn't doing anything wrong either.

Why would we punish him for pasting heads onto images, but not punish the artist who supplied the mannequin of Taylor Swift for the music video to Famous?†

https://www.youtube.com/watch?v=p7FCgw_GlWc

Why would we punish someone for drawing us a picture of Jerry Falwell having sex with his mother when it's fine to describe him doing it?

(Note that this video, like the recent SNL "Home Alone" sketch, has been censored by YouTube and cannot be viewed anonymously. Do we know why YouTube has recently kicked censorship up to these levels?)
by bondarchuk | 2026-01-09 10:15:28+00:00
http://www.audiosynth.com/files/sc-users-archive/v01.n223

http://www.audiosynth.com/files/sc-users-archive/v01.n224

http://www.audiosynth.com/files/sc-users-archive/v01.n225

http://www.audiosynth.com/files/sc-users-archive/v01.n226

http://www.audiosynth.com/files/sc-users-archive/v01.n227

(note I am not personally claiming this is RDJ)
by lihaciudaniel2 | 2026-01-09 10:15:29+00:00
https://chatgpt.com/s/m_6960d47106f4819189948b418cdcf76b

Edit: Coded a Shell Chess program using chatgpt

Edit 2: also deepseek

Edit 3: 4,000 lines of code, if anyone wants my program to use

Edit 4: contact me at danielllihaciujr[at]gmail.com
by sehansen | 2026-01-09 10:15:51+00:00
Organizations in decline often have to pay above market rate for executives, so it's hard to say that it's definitely too much. Especially when Mozilla spends ~$280,000 on software development, i.e. 40 times as much. Even paying the CEO $0 wouldn't really move the needle.

But, yeah, Mozilla has been fumbling constantly for the past decade, at least.
by jchw | 2026-01-09 10:16:17+00:00
Agreed. Arguably, though, it would be much more reasonable to trust cmd/go to verify a dependency than it would to trust your own code. A lot more effort is put into it and it has a proper security process established. So I think the point is, if you find yourself actually needing to verify the go.sum, not by using cmd/go, you are very likely doing something wrong.
by citrin_ru | 2026-01-09 10:16:21+00:00
> Sea transport isn't going to get any faster - probably ever.

It seems to me that modern freight ships are optimized for capacity/cost ratio and not for speed - hull shape is very close to a box with a short bow/stern attached. I'm not an expert but it looks like if you make the hull longer and a bow/stern narrow you can go faster. Military ships are optimized for speed and their hull shape is not a box.
by journal | 2026-01-09 10:16:29+00:00
realistically, you can get a project started within low enough tokens, to have a long enough conversation to generate something that looks like 1.0. eventually you will reach a point where every request becomes more expensive and caching doesn't help. you'll have to truncate/prune/hoist the context however you do that, summarize is what i do and i get creative. i have absolutely no idea how anyone using agents is producing anything maintainable over a long iterative period.

this is llm bitcoin moment, you will find them raise the price so high that running these agents like you are used to now will leave you with no pants on. you need to aim for minimum context, not stuff it with everything irrelevant.
by Earw0rm | 2026-01-09 10:17:06+00:00
Depends if you look at Spain in isolation.

On its own? Sure. (Although to be fair to Spain, they've invested heavily in solar and high-value agriculture in recent years).

But seen as part of a system with Germany and perhaps the UK (no longer part of the EU, but was better for both when they were), it's a valuable part of quality-of-life in the overall economic bloc.

Where would you rather live? Spain, easy.

Who would win in a war? Russia, easy.

Some will read this as an argument against the Spanish lifestyle. On balance I prefer to read it as an argument against war.
by DannyBee | 2026-01-09 10:17:58+00:00
This is the TRO order:

https://www.texasattorneygeneral.gov/sites/default/files/ima...

There is no written decision on the vacating other than what you already linked.

Reading the TRO, a lot jumps out at me. To pick a single thing:

"The Court HOLDS that because the State seeks injunctive relief pursuant to an
authorized statute, which supersedes the common law, it need not prove immediate and irreparable injury, nor does the Court have to balance the equities when the State litigates in the public interest."

Certainly the DTPA (https://statutes.capitol.texas.gov/?tab=1&code=BC&chapter=BC...) authorizes temporary restraining orders, but if you read it carefully, there is nothing in it that explicitly overrides or replaces the typical TRO standards.

A quick search doesn't show me that texas courts have interpreted it to do so anyway, but maybe they have - i'm not familiar enough with texas law to say for sure.

There are other issues with the TRO
by Y-bar | 2026-01-09 10:18:35+00:00
It wasn't a considered a bug, it was repeatedly reported to them from us via email and from other customers on their community pages.

Just take a look here for example: https://www.1password.community/discussions/1password/bug-su...

1Password then wrote:

> 1Password currently only suggests items based on the root domain. I can see the value of having 1Password suggest only exact matches based on their subdomain, especially for the use case you have described.

Or take a look here: https://www.1password.community/discussions/1password/sugges...

1Password then wrote:

> As it currently stands, 1Password only matches on the second level domain (i.e. sample.com in your example). While I can't promise anything, this is something we've heard frequently, so I'll share your thoughts with the team.

Now it is:

> You’ll see the item as a suggestion on any page that’s part of the website, including subdomains. The item may also be suggested on related websites known to belong to the same organization.

It's that second sentence which is the problem, they "suggested" by being "smart" items from one AWS domain which ought to have never suggested on another unrelated AWS domain.

In version 8.10 when they added Only fill on this exact host: https://support.1password.com/autofill-behavior/
by hugiex | 2026-01-09 10:18:49+00:00
Great writeup on query-based compilers! though I think the signal comparison is a bit misleading.
The defining feature of signal is automatic push propagation, change a source, updates flow through dependencies automatically. Query-based compilers don't have this at all. When an input changes, nothing happens until you explicitly re-query.
What you've described is really sophisticated memoization with smart cache invalidation (revisions, one-way dependency tracking and stuff), not reactive propagation. Both solve incremental computation, but through fundamentally different mechanisms: push-based reactivity vs pull-based lazy evaluation.

Still a great post on modern compiler architecture though! many thanks
by sneak | 2026-01-09 10:19:06+00:00
Just because art is challenging and unpredictable doesn’t mean it’s interned to make you suffer.

Is Giger’s art created to cause suffering? How about Beksiński’s paintings? The emotions they invoke are not happiness or joy, but neither are they purely dread or loathing.

Aesthetic pursuit isn’t solely (or even primarily) about the emotions it conjures in the consumer.

Remember: the customer is always right in matters of taste.
by Culonavirus | 2026-01-09 10:20:29+00:00
> How much money do you really need to maintain a CSS library?

Seems to me like Tailwind is a relatively complex beast covering a lot of ground, not to mention that web browsers are living/evergreen projects that are costantly moving forward, and so the lib needs frequent updates. I don't think you can avoid this (just by the nature of the project). You also need to be a css expert who follows the browser and feature development closely on top of having an excellent grasp of js/ts and the build (lightining css, vite...) ecosystem. I mean ... A few excellent engineers and a designer is probably just the bare minimum to keep Tailwind maintained.
by vidarh | 2026-01-09 10:20:50+00:00
I can easily get Claude Code to run for 8-10 hours unsupervised without stopping with sub-agents entirely within Claude Code.

I think it is more likely that if you stick with Claude Code, then you are more likely to stick with Opus/Sonnet, whereas if you use a third party CLI you might be more likely to mix and match or switch away entirely. It's in their interest to get you invested in their tooling.
by machomaster | 2026-01-09 10:21:00+00:00
1. "Truth"

2. "Truthful representation of US government policy"

They are 2 very different things. And even the second one can be easily debated against due to:

1. Discrepancy between what countries say vs. what they actually do. Threats, lies, dishonesty, hiding truth, creative paraphrasing, etc. are normal ways the politics operates.

2. Trump's twitter messaging. What he says does not necessarily represent even his own opinions and policy. Case in point, when he announced the no-fly-zone over Venezuela a few weeks ago. The problem? It was only a tweet. No actual commands/decisions were made/given to the diplomats, bureucracy, military. It was a fake news by the President himself.
by embedding-shape | 2026-01-09 10:21:02+00:00
I wish banks would get this memo. Not only is one of my banks enforcing a maximum password length of 6 NUMBERS (no letters/special characters allowed), but also that high-value transfers are only confirmed via SMS 2FA, even though their own banking app also have a separate 2FA thing that doesn't go through SMS, but it's only used for "low-value" actions...
by nabla9 | 2026-01-09 10:21:16+00:00
Technical details only verify Wasm's potential. Wide adoption is not a technical matter.

Just like with JVM and other better options before and after it, it's politics, interests and momentum. JVM in the browser was not killed by technology, it was killed by Microsoft. Similarly, we should look who gains and loses relative to other if Wasm becomes mainstream.

Easy portability and less platform dependence. Who wants it, who does not? Apple, Microsoft, Google, ...

Just like with JVM the Wasm can be killed with wrong embrace. Microsoft Java Virtual Machine (MSJVM) was named in the United States v. Microsoft Corp. antitrust civil actions, as an implementation of Microsoft's "Embrace, extend and extinguish" strategy. Adopt JVM, remove portability with extensions.
by ashrafu12 | 2026-01-09 10:21:33+00:00
You follow breaking news because it changes plans fast. What happened between the Trump administration and Venezuela — from tough talk about Maduro to U.S. actions that grabbed headlines and oil assets — affects politics, trade, and safety across the Americas. You need to know who made the moves, what those moves did, and why the fallout matters for both countries and for global oil markets.

This post lays out the key events, the policy choices that drove them, and the likely effects on U.S.-Latin America ties and energy flows. Expect clear facts, major developments, and the practical questions that matter for voters, businesses, and anyone tracking global security.

Key Takeaways

Trump’s actions shifted U.S. policy toward direct pressure and strategic control efforts.

Moves in Venezuela reshaped regional politics and affected oil and trade dynamics.

International reactions and domestic debates signal lasting consequences for the Americas.

Donald Trump’s Stance on Venezuela

You should know Trump has pushed for direct action, strong pressure on Maduro, and support for opposition leaders. His approach mixes military, economic, and diplomatic tools aimed at removing Nicolás Maduro and shifting power in Caracas.

Opposition to Nicolás Maduro

Trump publicly framed Maduro as illegitimate and hostile to U.S. interests. He supported U.S. military and covert actions aimed at capturing or removing Maduro from power, including a high-profile operation that led to Maduro’s arrest and transport to the United States.
by nolok | 2026-01-09 10:23:59+00:00
The EU court case against Microsoft, with FSFE and the Samba team fighting the good fight, was also a major step in getting there.

It was one of the "first few major cases" in the EU against tech, and the testimonies from the open source side had been great in explaining to the judge just what they wanted (what they didn't want at all, despite Microsoft claiming otherwise)

Then Microsoft got a fine by day and tried to play the force card by refusing to pay for a while.

https://fsfe.org/activities/ms-vs-eu/ms-vs-eu.en.html

https://blogs.fsfe.org/gerloff/2011/05/27/samba-case-hearing...
by coldtea | 2026-01-09 10:24:43+00:00
>But I think this alone is not very convincing. We don’t yet see major websites entirely built with webassembly-based frameworks

Unless it's something like Figma or a game, why the fuck would they be?

So that you get the joy of writing your website in some language that ports to WebAssembly (and is much more difficult to find frameworks and developers for) and not the native Javascript?
by palata | 2026-01-09 10:24:52+00:00
> it needs its own healthy and competitive software industry

Because it struggles to compete with the US monopolies doesn't mean that it doesn't have a software industry. It's hard to compete with TooBigTech when they are being anti-competitive, and whenever the EU tries to apply antitrust laws, they get bullied by the US.

> It does not matter if the e-ID or payments app is running on an open source mobile OS, but it should be possible to run it on a non-US one.

I don't think they are talking about creating a mobile OS? But I do think that e-ID and similar government apps should be open source, so that people can trust them.

> Open source may be one of the options, but it is not the right model for all types of software.

Agreed, it does not necessarily have to be open source. But my opinion is that if the taxpayer's money is used to pay for software, then that software should be open source.