MurphyA/hacker-news huggingface dataset:
by hsanthan | 2026-01-07 19:27:04+00:00
We’re excited to announce a major new capability in MCP Scanner: behavioral source code scanning. This feature goes beyond traditional security checks by analyzing whether an MCP tool’s actual behavior matches what it claims to do. By combining deep static code analysis with AI-powered semantic reasoning, MCP Scanner can now uncover hidden operations, data exfiltration, privilege abuse, and other deceptive behaviors that pattern-based scanners often miss. This helps catch cases where tools look safe on the surface but do something very different under the hood.
As MCP tools become a core part of agentic AI systems, trust and supply-chain security matter more than ever. Behavioral code scanning adds a critical pre-deployment layer to help teams confidently adopt MCP tools at scale. This capability is available today in the open source MCP Scanner and integrates easily into CI/CD pipelines, giving you actionable insights before risky tools ever reach production.

https://github.com/cisco-ai-defense/mcp-scanner
by foxyv | 2026-01-07 19:27:36+00:00
This is simply an "Appeal to Tradition" fallacy. People do lots of things for thousands of years that are worthless, wrong, or pointless. However, this also doesn't mean that just because we've done these things for a long time that they are in fact pointless.

There are methods to prove subjective things like "feeling better." There is in fact a lot of research that shows that meditation and exercise like Taichi is good for you.
by vintermann | 2026-01-07 19:27:46+00:00
> How do you implement point 3?

> Doesn't that then require a centralised ( or a hierarchy of centralized ) authority to manage point 3?

I'm not sure. I think it might be possible. Lots of wild things are possible with cryptographic primitives.

Even if a centralized authority is necessary for coordination (which seems inevitable anyway, the forum has to be hosted somewhere), if the authority could blind itself about who was who, that would be valuable.

Yes, any system which gives users the option to hard-ID themselves - which I think is a desirable feature, and probably necessary to prevent spam/sabotage - needs to piggyback on something existing, like a government ID scheme of some sort.

> If the solution requires you to keep a private key private ( to prove who you are ) - how is the average person going to do that?

Same way they keep their cryptographic keys secret today, their software does it for them with very little conscious effort. And yes, people can get hacked etc. I'm not proposing something that would solve all problems once and for all, just something that would be useful.

> All you need is one link between that pseudonym and some identifying info - like IP address or a payment - and it's all gone,

Yes, people would have to still be careful to not ID themselves accidentally. But worst case, we're back to more or less the kind of forum we're in right now with respect to identifiability (and probably still better when it comes to astroturfing).

> So even if you have built all that successfully I'd still suggest the world would split into sites that would use it and sites that wouldn't.

That's OK. I imagine lots of different "forums" or "chatrooms" with the feature that you know the list of participants, but you don't know which nym is which particpant.
by darth_avocado | 2026-01-07 19:28:05+00:00
I don’t think “Everything in Moderation” means you won’t get too much of the bad stuff. The philosophy alludes to the fact that in the modern world, trying to have the ideal diet is exhausting and near impossible. Lack of choice, money, time, education, self control etc. all contribute to you intentionally or unintentionally eating stuff that’s going to do irreparable harm to you. You could be eating salads and somehow poisoning yourself with pesticides and high sugar/fat/sodium salad dressings. Which is why this philosophy focuses on, do everything in moderation and you’ll maybe avoid CVD and other diseases for longer. It is meant for people who cannot meet the idealistic standards of what you are supposed to do.
by quesera | 2026-01-07 19:28:11+00:00
I currently have 20,097 tabs open in one browser profile. The oldest tab appears to be an HN post from 2.5 years ago, which must be the last time I swept tabs into bookmarks.

I used to sweep them more regularly, but Firefox + Sidebery don't even break a sweat with 20K tabs, apparently, so why bother?

The only downside is that it takes about 15 seconds for the browser to launch. I restart the browser whenever Firefox or macOS is updated, so every week or two.
by Dylan16807 | 2026-01-07 19:28:16+00:00
> What do you mean by long term value? The current market value is typically the best estimate we have for their long term value.

In situations where we still care about dollars, so no hyperinflation or total collapse of the United States, the current market value of a Treasury bond can't actually vary that much. And the amount it can reasonably vary is mostly proportional to how many years are left in the bond.

By the time your bonds reach maturity, you always have more dollars than you started with. Long term you always profit. And you get to choose what length of bonds you buy, so if you want to you can guarantee your dollars increase in the medium or short term on top of the long term.

> No one is talking about bank reserves. I'm talking about assets.

I'm saying you're too worried about "withdrawal requests" a normal bank would see.
by lapcat | 2026-01-07 19:28:23+00:00
It was always, always, always self-serving hypocrisy, and it's been that way my entire life. I've seen this kind of thing happen way too many times for it to be a mere coincidence.

When they're out of power, they call for freedom of speech and local control. When they're in power, they call for censorship and ban locales from making their own rules.

There are no foundational principles involved. To point out their hypocrisy is pointless, because hypocrisy is their modus operandi. Those without shame cannot be shamed. Your only defense is to never believe a word they say. If you grant that they originally had principles to lose, you've already lost the argument. It's giving them too much credit.
by epage | 2026-01-07 19:28:28+00:00
As I'm not familiar with the npm ecosystem so maybe I'm misunderstanding this but it sounds like they removed support for local publishes (via a token) in favor of CI publishing using Trusted Publishing.

If that is correct, I thought this was discussed when Trusted Publishing was proposed for Rust that it was not meant to replace local publishing, only harden CI publishing.
by threetonesun | 2026-01-07 19:28:47+00:00
You could go back in time and say this about jQuery. Tailwind's future was always questionable because CSS is growing in new and amazing ways, and wrapping the complexity of new CSS features into helper classes isn't really a sustainable model.

That said if someone wants a business model, figure out a way to get paid to get AI to make UIs using newer CSS features, because right now it's quite terrible at it.
by zahlman | 2026-01-07 19:28:50+00:00
"New questions over time", I suppose, was the intended phrasing; and yes.

Also, this is a new set of "rounds" it's making. Graphs like this have been getting shopped around off and on for a few years now.

Previous rounds of discussion famously include https://meta.stackoverflow.com/questions/433864 . The decline was even noted before ChatGPT, e.g. https://meta.stackoverflow.com/questions/413657.
by motbus3 | 2026-01-07 19:28:56+00:00
This GitHub conversation is disgraceful. Lots of complaints and no support to the devs.

The company I work for is going through the same. It is not a product for dev though. We ceased support for many countries now because people see no reason for paying, but after it was gone they said they would pay.
If you wait too much for supporting good folks those projects will be gone and only greedy corps will exist
by CGMthrowaway | 2026-01-07 19:29:04+00:00
Forward operating site is not what you seem to think. It's more like a place to set up temporary comms support, recon support, maybe SAMs etc then skedaddle out of there (perhaps leaving the equipment behind for the duration of the operation). If the site cannot be clandestinely set up then it's often not worth trying. What parent described is perfectly reasonable
by lawlessone | 2026-01-07 19:29:07+00:00
i am in the process of finishing up a role doing annotations for these for a company i cannot name (basically clicking lots of box hundreds of times a day)

So it has probably influenced my views somewhat on them.

Anecdotally having chatgpt do some of my CV was ok but i had to go through it and remove some exaggerations. The one thing i think these bots are good at is talking things up..
by bostik | 2026-01-07 19:29:12+00:00
This has already been the case for political and/or social impact events for years in the UK's betting exchanges. The settlement rules for any potentially hairy real-world event have to be explicitly clear and account for all possible outcomes that might affect the resolution.

When there's money on the line, I have years of hard evidence that arm-chair lawyers (ie. betting exchange clients) will do absolutely anything to find potential loopholes in settlement rules and argue that their bets should have paid off.
by PaulDavisThe1st | 2026-01-07 19:29:15+00:00
I have zero time for this 7th Day tin hat stuff.

I asked about corporate interests with traction ... the milk industry has already successfully pushed back against the larger desires of the alternative milk sector, and most people I know who use those products don't do so out of a belief that they are "healthier" but simply that they are non-dairy.
by jibbers | 2026-01-07 19:29:19+00:00
Location: North Dakota, USA

Remote: Yes, I am an experienced remote worker. In-office work is great, too.

Willing to relocate: I would prefer relocation.

Technologies: HTML, CSS, and basic JavaScript, as well as Sketch, and other design tools.

Résumé/CV: https://dillonbrown.me/resume.pdf

Portfolio/Website: https://dillonbrown.me

I sit right between design and development. I've held web development positions as well as design-based roles. I've worked at huge companies and startups. At the end of the day I just want to use computers to help people and solve problems.

- Dillon
by overgard | 2026-01-07 19:29:29+00:00
Ancient grains are great! But frankly, you're probably not going to be finding Einkhorn grains in you're grocery store. It's not just the way whole grains are processed, it's also about the plants they grow from. Also, the way ancient grains are processed is not particularly profitable (they need to sit and ferment, for instance, and the grain itself is a lot lower yield).

If you want to eat ancient grains I'd say go for it, but when I talk about whole grains I talk about what you're going to find in an average grocery store, and even what you find at a place like Whole Foods is pretty bad.

I highly suspect that nobody other than body builders are eating eggs in excess (if that's even possible -- what bad nutrients are in eggs?). Eggs are kind of a pain in the ass to cook (other than hard boiling), and most processing is about convenience.. In any case, things like choline are hard to get from other sources, and I think it's not that wild to assume our ancestors loved to raid birds nests for nutrient dense eggs.

Agreed on a lot of flip flops in dietary recommendations, but that definitely doesn't mean that the classic food pyramid was anywhere close to correct.
by andrewflnr | 2026-01-07 19:29:33+00:00
I'm pretty sure they still do, actually. What I suspect happened is that someone high up the food chain put out a broad directive to remove "gender ideology" without thinking too hard about the consequences, and then some relatively unimaginative admins lower down decided to implement it Consistently With No Exceptions. Just doing their jobs "fairly". I expect they'll fix the glitch, frankly, at least the immediate glitch.
by searls | 2026-01-07 19:29:43+00:00
This is madness. Some stories actually have good guys. I don't know Adam directly, but we have plenty of second degree connections. I've benefited immensely from his work, have never heard anyone say a single negative thing about him, and I genuinely believe he's done more to push the web forward with Tailwind than the larger players have done (certainly more than Facebook did with React and Google has done with Angular/AMP/etc).

Reflexively assuming that unanimous positive sentiment towards someone is itself an indication of a problem is exactly the reason people are writing posts as recently as (double checks) _yesterday_ titled "65% of Hacker News Posts Have Negative Sentiment, and They Outperform" https://philippdubach.com/standalone/hn-sentiment/
by nerdjon | 2026-01-07 19:30:26+00:00
All of the reporting about Apple being behind on AI is driving me insane and I hope that what Dell is doing is finally going to be the reversal of this pattern.

The only thing that Apple is really behind on is shoving the word (word?) "AI" in your face at every moment when ML has been silently running in many parts of their platforms well before ChatGPT.

Sure we can argue about Siri all day long and some of that is warranted but even the more advanced voice assistants are still largely used for the basics.

I am just hoping that this bubble pops or the marketing turns around before Apple feels "forced" to do a copilot or recall like disaster.

LLM tech isn't going away and it shouldn't, it has its valid use cases. But we will be much better when it finally goes back into the background like ML always was.
by tptacek | 2026-01-07 19:30:27+00:00
We're talking about different things here. A pentesting agent directly tests running systems. It's a (much) smarter version of Burp Scanner. It's going to find memory disclosure vulnerabilities the same way pentesters do, by stimulus/response testing. You can do code/test fusion to guide stimulus/response, which will make them more efficient, but the limiting factor here isn't whether transformers lose symbolic inference.

Remember, the competition here is against human penetration testers. Humans are extremely lossy testing agents!

If the threshold you're setting is "LLMs can eradicate memory disclosure bugs by statically analyzing codebases to the point of excluding those vulnerabilities as valid propositions", no, of course that isn't going to happen. But nothing on the table today can do that either! That's not the right metric.
Show HN: A to Z – A word game I built from a childhood road trip memory
by jackhulbert | 2026-01-07 19:31:04+00:00
Long time lurker here. My family had a pen-and-paper game we'd play on long drives to visit my great-grandmother. After she passed, I spent the holidays recreating it:
https://a26z.fun

How it works:

Find 15 words from a category (like "Stone Fruits," "US States," or "Dog Breeds") as fast as you can. Once you meet the 15 word minimum, you can play for as long as you want.

Each letter shows how many target words start with it (A¹ = one word starts with A, N² = two words start with N)

That small ² in the bottom-right? Multi-word answers allowed. For "US States" with N², both "NEW YORK" and "NORTH DAKOTA" count

Unlimited guesses, 2 hints, and a shuffle button to reorder by frequency.

Example:
Category: US States | Letters: A¹ M¹ N² S²
Answers: ALABAMA, MONTANA, NEW MEXICO, SOUTH DAKOTA

If you're into Connections or Strands, this scratches a similar itch but with a deduction twist.
by mrec | 2026-01-07 19:31:12+00:00
> I never associated the word spaz with... I dunno what it is... multiple sclerosis or whatever

Usually cerebral palsy, I think, or (less commonly) epilepsy. I'm not sure it's still that common in the UK; I don't think I've heard it in the wild since the 80s [1], though some of that may just reflect the people I talk to as I get older.

[1] https://en.wikipedia.org/wiki/Joey_Deacon#Blue_Peter_and_cul...
by lenerdenator | 2026-01-07 19:31:15+00:00
> engaging in centralized economic planning for giant bets on AI

If they're centralizing economic planning on that, then there's probably at least some economic planning that they would be doing to keep a relatively stable regulatory regime in place.

Which, y'know, isn't the case.

Ultimately the world has reached a point where social systems in both business and government are run the same way. Probably because they're run by the same kind of person. Sometimes even the same people.
by codyb | 2026-01-07 19:31:44+00:00
Seems reasonable to me, a very anti Trump individual. Now deliver.

And which of his buddies does this benefit?

I'm trying to think if there will be ramifications to this...

- Obviously forced divestment of all Wall St owned single family homes could impact housing prices which is both the point, but of course... also hurts many families borrowing power and net worth

- I guess that crash could potentially have people paying lots of money for homes that aren't worth that much anymore, which sounds pretty negative

- Of course... wow, would it be nice to be able to afford something in the city I love (which I doubt will be impacted by this)

Of course, no clear plan here. Just Trump saying something, why wasn't the "Trump says" part kept in the headline here?
by qsort | 2026-01-07 19:31:57+00:00
It seems to me like this is yet another instance of just reading vibes, like when GPT 5 was underwhelming and people were like "AI is dead", or people thinking Google was behind last year when 2.5 pro was perfectly fine, or overhyping stuff that makes no sense like Sora.

Wasn't the consensus that 3.0 isn't that great compared to how it benchmarks? I don't even know anymore, I feel I'm going insane.
by burkaman | 2026-01-07 19:32:21+00:00
I don't use Polymarket so if this is the established precedent then that's fine, but I will maintain that it's a crazy interpretation of the word. One country's military violently ___ing another country and taking prisoners with the explicit goal of controlling that country is clearly an invasion. I'm struggling to think of another verb that could work in that sentence.

Edit: I guess "raiding" as you say, but that's a tactic used during a war, and apparently we aren't at war. If Israel had announced after a raid that their intent was to control the target country, then I would say their raid was actually an invasion.
by staticman2 | 2026-01-07 19:32:56+00:00
>about how LLMs are just statistical machines and not really thinking,

I don't think the article said anything about statistics?

This seems to be a sort of Rorchasch test but looking at it again:

>This does not bode well for my interest in meeting new people

It really does seem to me the article is making fun of people who think this sort of article is on point.

There's a genre of satire where the joke is that it makes you ask "Who the heck is the sort of person who would write this?"

It could fit in that genre but of course I could be wrong.
by zahlman | 2026-01-07 19:33:00+00:00
> This actually could be a good argument for LLMs, you won't get told your question is dumb.

It is.

The consensus in the meta community is basically: we don't want AI on the site (although clearly the owners do); people who would benefit from generative AI can get basically all its benefit by using it off-site, as it's heavily trained on Stack Overflow (and agents can presumably search it) anyway. It's fine if people use that off-site; it keeps out unsuitable questions and is basically filling the role that conventional search used to before Google got so enshittified.
by overgard | 2026-01-07 19:33:01+00:00
I mean, what you want to put in your body is up to you, but an industrial byproduct that involves a lot of chemistry seems like something I'm not a fan of. Also if you go past the history a bit: "The FDA released its final determination that Partially Hydrogenated Oils (PHOs), which include partially hydrogenated cottonseed oil, are not Generally Recognized as Safe (GRAS) in 2015."

Olive oil definitely has a flavor, but other oils are pretty neutral (I cook with avacado oil because of the high smoke point and I don't notice it really effecting anything). Also you have to keep in mind that those seed oils have a neutral flavor because they've been through a deodorizing chemical process, otherwise they'd taste/smell rancid.
by woodruffw | 2026-01-07 19:33:51+00:00
> If that is correct, I thought this was discussed when Trusted Publishing was proposed for Rust that it was not meant to replace local publishing, only harden CI publishing.

Yes, that's right, and that's how it was implemented for both Rust and Python. NPM seems to have decided to do their own thing here.

(More precisely, I think NPM still allows local publishing with an API token, they just won't grant long-lived ones anymore.)
by ToValueFunfetti | 2026-01-07 19:34:00+00:00
Who is "we" here? I can't count how many times I've argued against just an apparently broadly-held view that free speech ends at the first amendment and isn't a general principle that should be practiced at, eg., universities. Looks like when I argued that here, I was told that I should pick a different term for the principle of free speech in order to disambiguate from the first amendment (they recommended calling it 'my personal content preferences').

Likewise uncountable is the number of times I've said normalizing free speech restrictions against the other side will come back to bite you once they're (inevitably, especially given these tactics) in power.

I can see how 'pro-speech' might have appeared to be a right-leaning position when violations were typically against right-leaning expression, but I never got the sense that either side really gave a damn.
by Goronmon | 2026-01-07 19:34:11+00:00
It was not immediately clear what legal authority Trump would draw upon to impose such a ban on the private market purchases of houses. Trump did not detail the policy, the form it would take or the legal changes he was seeking from Congress.

The White House did not immediately respond to a request for comment. The U.S. president was due to sign unspecified executive orders later on Wednesday.

Anyways, I thought that issues with Americans being able to afford things like housing was all a hoax made up by Democrats?

Why craft policies to address a made up issue?
by twalichiewicz | 2026-01-07 19:34:19+00:00
I recently rewatched a Tested Q&A where Adam Savage discussed his post-Mythbusters life; his framing of that duality was very similar: https://youtu.be/2tZ0EGJIgD8?t=322.

It aligns with a common design principle: constraints often make a problem space easier to navigate. I suspect life is similar. Having limited time creates a "specialness" that is easily lost when you suddenly have an infinite amount of time at your disposal.
by metabagel | 2026-01-07 19:35:20+00:00
It's a practice. There are benefits. It's not a cure-all. The goal is to be more in control and aware of your own thoughts and feelings. You achieve that by learning to turn off the "monkey mind" - the continuous stream of distracting thoughts and feelings which can lead us down paths which are not of our deliberate choosing and not necessarily beneficial to our wellbeing.

It is often said that if you go into meditation with a goal to improve yourself that you will probably be disappointed. I guess I would say that meditation is as much about unlocking your intuition as it is about anything else, so consciously trying to improve yourself through meditation does seem to miss the point of the practice.