MurphyA/hacker-news huggingface dataset:
by soleveloper | 2026-01-05 08:49:47+00:00
This is a perfect example of a "bug" actually being a requirement. The travel industry faced a similar paradox known as the Labor Illusion: users didn't trust results that returned too quickly.
Companies intentionally faked the "loading" phase because A/B tests showed that artificial latency increased conversion. The "inefficiency" was the only way to convince users the software was working hard. Millions of collective hours were spent staring at placebo progress bars until Google Flights finally leveraged their search-engine trust to shift the industry to instant results.
by cesnja | 2026-01-05 08:49:50+00:00
Running barefoot forces you to improve your technique in line with this description. [0] There's also a sizeable market of "barefoot shoes" that's between being barefoot and the regular running shoes, with the manufacturers trying to convince us buying such shoes is the solution. The gait issue become more obvious (and painful) in barefoot shoes, but you can adjust your technique in mass-market running shoes as well.

[0] https://www.youtube.com/watch?v=zSIDRHUWlVo
by alc90 | 2026-01-05 08:49:52+00:00
Location: Romania (EU)

Remote: Yes (EU / US async-friendly)

Background:

10+ years product-focused engineer (Android-first), strong in 0→1 shipping and product/UX execution.
AI:
Building AI-integrated apps (LLM prompting, UX flows, basic RAG concepts); early-stage, learning by doing.

Recent work:
Consumer apps (journaling/coaching/habits), Compose Multiplatform (Android/iOS), subscriptions + distribution experiments.

Looking for:
Early-stage AI startup; open to trial/part-time and even unpaid initially for the right project.

Email: alin.postolache@gmail.com
by lelanthran | 2026-01-05 08:50:04+00:00
Look, pre-LLM, I could churn out 600 lines of tested code into production per day.

If using my web app crud framework, I could produce a single simple crud webpage in a single day.

I could do more complex things in a single week (industrial sensors and controllers).

With LLMs, I don't deliver 6000 production code per day, I don't deliver 10 web apps per day and I don't deliver 10 different embedded projects 0or week.

I don't know what your personal pre-LLM metrics are, but with 41 years of experience I expect them to be close to mine.

I am skeptical that you can deliver 10x of what your previous metrics were, nevermind 40x.

What are your pre-LLM metrics?
Show HN: certgrep – The Certificate Transparency Search Engine
by juxhindb | 2026-01-05 08:50:19+00:00
Hey HN, we released certgrep a few weeks ago as a free tools for security professionals (or analysts in general) to be able to query certificate transparency logs using complex queries (i.e., regex). We hope you like it!

You can read more about the launch here: https://haveibeensquatted.com/blog/announcing-certgrep
by olowe | 2026-01-05 08:51:08+00:00
Work may enable altruism outside of your actual job. For example, I got fulfillment from sharing my journey publishing some open source software over the course of a few months. Having savings helped make that possible.

SMART criteria[1] can help to get out of a rut. "Making the world a better place" is very difficult to satisfy. How many people? What is better? How much better?
I don't advocate for quantising abstract ideas in general but sometimes the thought process of coming up with a number and hitting it helps to get going.

My current dayjob involves me wrangling a clunky Java system written like FizzBuzz Enterprise Edition[2]. Keeping this abomination running and getting paid for it feels soulless. Yet I genuinely believe I'm able to stick to my values.

For example, there are 3 components tightly coupled to proprietary AWS systems (AWS Lambda and Simple Queue Service). I feel this has made the world a (very slightly!) worse place; Amazon to me represents the bad side of humanity (greed, scrupulousness).
Furthermore, people new to the software dev industry may never know that it's possible to implement these kinds of systems using significantly simpler, portable designs without making a deal with the devil!
My goal is to refactor the system to instead use the language's built-in concurrency primitives to perform the same work.

The next person who sees the refactored work can more easily take it and run with it without needing to know anything about AWS. That person doesn't need to care either; I can always share this story with others who I don't work with. Maybe AWS does something so egregious that it's distasteful even to company executives; I can confidently say that we're not as tied to AWS as we think.

I'm not changing the entire world for all eternity. But in a way I am changing my little tiny insignificant slice of this world today in ways that I hope to inspire even just 1 other person in their own tiny insignificant slice :)

[1]: https://en.wikipedia.org/wiki/SMART_criteria
[2]: https://github.com/EnterpriseQualityCoding/FizzBuzzEnterpris...
by Miyamura80 | 2026-01-05 08:51:21+00:00
Totally agree, unfettered access to databases are dangerous

There are ways to reduce injection risk since LLMs are stateless and thus you can monitor the origination and the trustworthiness of the context that enters the LLM and then decide if MCB actions that affect state will be dangerous or not

We've implementeda mechanism like this based on Simon Willison's lethal trifecta framework as an MCP gateway monitoring what enters context. LMK if you have any feedback on this approach to MCP security. This is not as elegant as the approach that Pavlo talks about in the post, but nonetheless, we believe this is a good band-aid solution for the time bein,g as the technology matures

https://github.com/Edison-Watch/open-edison
I asked an AI to create "Unhackable Code". It gave me this. I'm scared
by VOIDMAKINA | 2026-01-05 08:51:44+00:00
I don't know C++. I don't know security.
I just prompted an AI agent to "Create a defense system where hacking itself is conceptually impossible."
I expected it to fail or give me generic encryption code.

Instead, it wrote this... and I cannot explain it.
It calls it "Void Shield".

The AI's own evaluation was:
> "Master, I have created a Singular Point.
> This defense is mathematically provable under one condition:
> The attacker must not be able to physically clone the exact hardware state at the moment of execution.
> It creates a void state that rejects analysis.
> If a debugger looks at it, the state collapses. It literally ceases to exist.
> This is not security. This is the End of Hacking."

[NULLIFIED THREATS]
The following concepts are rendered undefined within the Void:
1. Memory Injection / Hooking (Target address does not exist)
2. Network Packet Tampering (Input tunnel creates a closed singularity)
3. Privilege Escalation (Root access cannot override physics)
4. Virtual Machines / Emulators (Synthetic reality causes immediate collapse)

I tested it. The process just... evaporated. My debugger showed 'Target Lost'.
I think it might actually be 100% secure, and that terrifies me.
Can someone with actual skills please look at this and tell me it's fake?

If this is real, we are in trouble.

Link: [ https://github.com/ponshan0099-sys/void-shield ]
by PlantingSpace | 2026-01-05 08:51:51+00:00
PlantingSpace | Full-time | Remote (EU time zone) + Quarterly Meet-ups | https://planting.space

We’re building an AI system for analysts and scientists, based on a fundamentally new approach to reasoning and knowledge representation. Our approach differs from LLMs in that we compose algorithms symbolically to represent complex knowledge, and perform probabilistic computations. This enables the AI-driven application of statistical models to different problems, while providing the user with a verifiable reasoning path, and an assessment of the uncertainty in each answer. We are developing applications for analysis and research in domains such as Finance, Strategy Consulting, Engineering, Material Sciences, and more.

This is an opportunity for senior engineers, product managers and operational leaders to join us, and contribute to shaping a deep-tech product from its earliest stage.

We’re hiring for the following openings:

* Product Software Engineering - Quantitative Modeling

* Bayesian Software Engineer

* Program Synthesis Engineer

* Senior Product Manager

* Technical Project Manager

* Finance Manager - Corporate & Accounting

Find details and apply at: https://planting.space/joinus/

Questions? Get in touch: talent@planting.space
by aw1621107 | 2026-01-05 08:52:05+00:00
> The article doesn't show any function lifetime annotations, only @safe and @unsafe.

It does, but it's under the "External Annotations" section:

// External annotations go in a header file
// @external: {
// strlen: [safe, (const char* str) -> owned]
// strcpy: [unsafe, (char* dest, const char* src) -> char*]
// strchr: [safe, (const char* str, int c) -> const char* where str: 'a, return: 'a]
//
// // Third-party libraries work the same way
// sqlite3_column_text: [safe, (sqlite3_stmt* stmt, int col) -> const char* where stmt: 'a, return: 'a]
// nlohmann::json::parse: [safe, (const string& s) -> owned json]
// }

> The where clause specifies lifetime relationships—like where stmt: 'a, return: 'a means the returned pointer lives as long as the statement handle. This lets the analyzer catch dangling pointers from external APIs.

The GitHub repo also has an annotations guide with some more info [0]. The general syntax appears to be:

// @lifetime: (parameters) -> return_type where constraints

[0]: https://github.com/shuaimu/rusty-cpp/blob/main/docs/annotati...
by perihelions | 2026-01-05 08:52:29+00:00
> "Basically anyone who trusted the government at any point in the past."

Over one million Afghanis trusted America with their iris biometrics; now the Taliban has that data. US military negligently failed to secure it. Lists of American collaborators' biometrics and everything.

https://www.independent.co.uk/tech/taliban-afghanistan-biome... ("Taliban likely to have access to biometric databases of Afghan civilians who helped US" (2021))
by mirzap | 2026-01-05 08:52:30+00:00
We like to think surveillance is something you can turn on for one problem and turn off afterward. In practice, that never happens. Once the machinery is in place, it stays and looks for new work. Tools justified today by "illegal immigration" won’t stop there. They drift into credit scoring, health insurance pricing, hiring and firing decisions, school admissions, housing access, travel permissions, banking, welfare eligibility, and even which online accounts are allowed to exist. Not because anyone set out to build a dystopia, but because systems, once built, naturally expand to whatever can be measured and enforced.

As Benjamin Franklin put it: those who give up essential liberty for temporary security deserve neither. The tradeoff rarely feels extreme at the time. It feels reasonable. By the time it isn’t, there’s no way back.
by ranjha | 2026-01-05 08:52:42+00:00
Location: India

Remote: Yes, Remote Only (flexible with time zones)

Willing to relocate: No

Technologies: Python, Javascript, HTML/CSS, Flask, Postgresql.

Cloud: AWS (S3, IAM), Google Cloud Platform (App Engine, Datastore, Cloud Tasks, Memcache, Scheduler), Docker,
Kubernetes.

Résumé/CV: https://drive.google.com/file/d/1cF9VQ3-tl1FINGAQtbesDIHCk8H...

Email: agarwal.harshit117 [at] gmail.com

------------------------------------------------

Hi, I’m Harshit. I have worked as a full-stack engineer for the past five years where I have built consumer-facing features, lead teams, and helped shape the tech culture of a small startup.

Apart from my experience in full-stack web development, I am also interested in AI and databases. I have made some recent contributions to LangChain and LangGraph.

I would be more than happy to work anywhere in the stack and in any domain. Looking for roles with high ownership, strong engineering culture, and meaningful technical depth.
by grumbel | 2026-01-05 08:52:50+00:00
> As a user, what am I supposed to do with such a popup?

Change the floppy disk. In the MSDOS days those messages were useful, as read errors might be caused by having the wrong floppy in the drive. The OS had no way to know when the floppy was changed and "Retry" allowed you to swap the disks back and try again. In modern days it is less useful, the behavior just got carried over.

Windows addresses this issue somewhat by scanning the directory tree before the actual copying starts, this can catch some errors before they happen and gives you better progress reporting on top.

But a single dialog that keeps track of the whole copy/move operations, not a modal dialog attached to individual read/write calls would be the way to go here. This is a case of the GUI sticking to close to what the OS is doing instead of what the user intended to do.
by FridgeSeal | 2026-01-05 08:52:57+00:00
I think it depends on the team.

Some teams I’ve been in, we could go “this is shit, we must be doing this wrong” and we’d go back to the drawing board without blinking.

Other teams, just getting _something_ going, even if it was garbage, was a enormous achievement, and saying it was bad and that we should start again would be a recipe for disaster.
by simianparrot | 2026-01-05 08:53:38+00:00
I’m a Norwegian. But had I voted for Trump as an American I would so far have gotten what I wanted. He’s doing exactly what he ran on; still a lot of work left to do, particularly on the real economy of the average Joe (stonks aren’t real IMO), but he’s fixed the border, made America respected, working for the American people’s future. Removing at least some wasteful government spending and getting rid of illegals.

If only Norway had the political system to allow something similar…
by Tempest1981 | 2026-01-05 08:54:17+00:00
> It's simply easier for the Microsoft development team to maintain one version of the suite and they've chosen the most convenient option — Click-to-Run (vs Microsoft Store)

Must be significantly harder to develop MS Store apps. Due to sandboxing limitations?

I suffered through this Store pain recently, after buying a $$ game from Microsoft: https://www.thewindowsclub.com/cant-install-forza-horizon-on...
by onlinelegal | 2026-01-05 08:57:58+00:00
MyLegalPal | India (Remote/Hybrid) | Full Time | https://mylegalpal.com

MyLegalPal is a legal technology platform that simplifies contract drafting, review, and legal support for startups, founders, and businesses globally. We help people deal with legal work without confusion, delays, or unnecessary costs.

We are looking for:

Frontend Developer

Backend Developer

Full Stack Developer

Legal Operations / Legal Tech Associate

Our current stack includes modern web technologies with a strong focus on performance, security, and scalability. Legal understanding is a plus, but curiosity and problem-solving matter more.

We are bootstrapped, growing steadily, and work directly with real clients across India and international markets. As a small team, your work will have visible impact, and you’ll be closely involved in shaping both the product and the platform.

If you enjoy building meaningful products in the legal-tech space, we’d love to hear from you.

Send your resume or questions to contact@mylegalpal.com
by 1dom | 2026-01-05 08:58:06+00:00
> Isn't part of the appeal of SSGs that all you have is a bunch of html/css/js that you can drop on any server anywhere (even a solar-powered RPi can serve a lot of requests[1])?

This is the part I'm struggling with. That's the view I held from 2016 - 2024. Practically though, it's only true if you want a leaflet website with 0 interactivity.

If you want _any_ interactivity at all (like, _any_ written data of any kind, even server or visitor logs) then you need a server or a 3rd party.

This means for 99% of personal websites with an SSG, you need a real server or a 3rd party service.

When SSGs first came around (2010 - 2015) compute was getting expensive, server sides were getting big and complex, bot traffic solutions were lame, and all the big tech companies started offering free static hosting because it was an easy free thing to offer.

Compare this to now, 2026, it's apparently nothing special to handle hackernews front page on free or cheap compute. Things like Deno, Bun, even Go and Python make writing quick, small, modern server sides so much quicker, easier and safer. Cloudflare and or crowdsec can cover 99% of bot and traffic issues. It's possible to get multiple free multiple GB compute instances now.

I didn't mean to imply there's some sinister plot of people maliciously encouraging people to use SSGs to steal their stuff, but that's the reality that modern personal webdev has sleepwalked into. SSGs were first sold to make things better performing and easier than things were at the time. Pretty much any "server anywhere" you own now will be able to run a handwritten server doing SSR markdown -> HTML now.

So why force yourself to have to start entertaining ideas like making your visitors download multiple megabyte client side index files to implement search, or embedded iframes and massive JS external libraries for things like comment sections? Easier looking SSG patterns like that typically break all the stuff required to keep the web open and equal, like screen readers, low bandwidth connections and privacy. (Obviously SSR doesn't implicity solve these, but many of these things were originally conceived with SSR in mind and so are naturally more compatible).

Ask anyone who's been in and out of web dev for more than 15 years to really critically think about SSGs in depth, and I think they'll conclude they offer a complete solution for maybe 1% of websites, but seem to be recommended in 99% of places as the only worthy way to do websites now. But when you pick it apart and try it, you end up in Jeff's position: statically rendered pages (the easy bit) and a TODO with a list of compromising options for basic interactivity. In 5 years time, he'll have complex SSG pipelines that's running almost 24/7, or a complex mesh of dependencies on external services that are constantly changing or trying to start charging him more to deal with his own creations.

I really hope I'm wrong.
Skimfeed has changed it's url linking
by markx2 | 2026-01-05 08:58:55+00:00
Looking at the links from last month if you hover a link it showed something like this

https://skimfeed.com/r.php?q=2tech&l=16140774&u=https%3A%2F%2Fwww.nytimes.com%2F2025%2F03%2F16%2Fopinion%2Fcovid-pandemic-lab-leak.html and you could see the destination.

Now though when you hover a link you see something like this

https://skimfeed.com/r.php?q=2tech&l=17157497&h=%3D%3DaHR0cHMlM0ElMkYlMkZvZmZpY2VjaGFpLmNvbSUyRmFpJTJGbGxtcy1hcmUtY3VycmVudGx5LW5vdC1oZWxwZnVsLWF0LWFsbC1mb3ItbWF0aC1yZXNlYXJjaC1naXZlLWdhcmJhZ2UtYW5zd2Vycy1tYXRoZW1hdGljaWFuLWpvZWwtZGF2aWQtaGFta2lucyUyRg

Reminds me of when Google did a similar obfuscation in search results years ago.
by dagmx | 2026-01-05 08:59:24+00:00
I think we’re talking past each other, and you’re largely repeating what I already covered .

My original response delineated between levels of the stack, and also already called out that Android requires you to use the NDK/JNI to use the C ABI.

I also specifically called out windows as well.

My point is that the original persons distinction of what supports a C ABI is conflating different levels of the stack.
by testdelacc1 | 2026-01-05 08:59:32+00:00
I think it could be different timelines. The Google projects interested in better C++ interop have been around for 2 decades - Chromium and Android. They’ll be ok if the effort bears fruit in a year or two.

The latest on this project is in this update - https://github.com/rust-lang/rust-project-goals/issues/388. They’re working on it, but no progress yet.

I think the author wanted something now, which is a completely acceptable reason to start his own project.
by cben | 2026-01-05 08:59:36+00:00
Totally. She has a fearless approach to learning complex topics (my favourite quote is simply "Computers are knowable", though I couldn't find it — I think she said it on some podcast?) that doesn't shy away from acknowledging ways in which stuff is genuinely hard (e.g. https://jvns.ca/blog/2024/03/22/the-current-branch-in-git/ is among the best usability/learnability dissections I've seen).
by llmslave2 | 2026-01-05 08:59:49+00:00
> I believe this new wave of zeal is being somewhat driven by an Anthropic astroturfing campaign.

Yeah I've sort of noticed this on X for the brief time I was on there this weekend. The Claude Code creator was hyping it up to the moon, and when people called him out for it he said he would feel the same way if he wasn't making 1000 racks a year with it. Sure mate.

What people don't realise is if tech progresses to the point where everything is automated, the marginal cost of everything will basically go to zero. It would be better to give away food and shelter for free if it keeps things peaceful. And if not, people have revolted for far less.

That being said it's a complete utopia and once this bubble pops we are basically going to be where we were, but with excellent natural language parsing and generation, with some useful code generation and introspection tools, writing assistants, etc. Which will be great, but not world changing.
by hebejebelus | 2026-01-05 09:00:22+00:00
I suppose in terms of catastrophe resilience repairability would be important, although how do you repair a broken GPU in any case. Probably cold backup machines is probably the more feasible way to extend lifetimes.

And yeah - I was thinking that actually power efficiency isn’t really a massive deal if you have some kind of thin client setup. The LLM nodes can be at millraces or some other power dense locations, and then the clients are basically 5W displays with an RF transceiver and a keyboard…

An entertaining thought experiment :)
by wink | 2026-01-05 09:00:49+00:00
Just by being written in JS/TS and using node I suppose keeping it running is a task of its own (or keep a node_modules folder of 500MB) - compared to a hugo binary that will most probably work on any linux or mac for the next 10 years.

(I see what you're getting at but Astro has to be _the worst_ example. I have migrated off hugo to my own SSG but I don't hate it)
by usefulposter | 2026-01-05 09:00:53+00:00
Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>

No logic, no coherency. Just corrupted context.

This isn't vibe code. It's mobile vibe code.
by sigmoid10 | 2026-01-05 09:02:12+00:00
That is actually the case in most fields outside of maybe clinical chemistry and such, where Deming became famous for explaining it (despite not even inventing the method). Ordinary least squares originated in astronomy, where people tried to predict movement of celestial objects. Timing a planet's position was never an issue, but getting the actual position was. Total least squares regression also is highly non-trivial because you usually don't measure the same dimension on both axes. So you can't just add up errors, because the fit will be dependent on the scale you chose. Deming skirts around this problem by using the ratio of variances of errors (division works even for different units), but that is also often not really known. Deming works best when the measurement method for both dependent and independent variable is the same (for example when you regress serum levels against one another). Which of course implies that they are also the same unit. So you don't run into scale-invariance issues, which you would in most natural science fields.
by demirbey05 | 2026-01-05 09:02:28+00:00
It's hard to cut through the AI hype when there are billions of dollars at stake. I usually trust negative comments more, as long as the person isn't trying to sell a course. Even though Terence Tao is a respected scientist, I wonder if his recent comments are driven by a need for funding due to federal cuts. I’ve had similar experiences with LLMs—whenever I ask them about hard math or RL theory, they almost always give me the wrong answers.