MurphyA/hacker-news huggingface dataset:
by Sn0wCoder | 2026-01-23 01:32:07+00:00
You do realize that 2-4% is not left on the 'table' its taken from the merchant you are shopping at. If you are at a big box store sure but when going to local merchants its best for them if you use debit or cash.
One could argue the merchant 'choose' to accept CC but in this day and age its more like extortion because the CC lobbyist were able to make it illegal to pass that charge onto the customer.
by OhMeadhbh | 2026-01-23 01:32:10+00:00
Because TCP interprets packet loss as congestion and slows down. If you're already on a slow, lossy wireless link, bandwidth can rapidly fall below the usability threshold. After decades of DARPA attending IETF meetings to find solutions for this exact problem [turns out there were a lot of V4 connections over microwave links in Iraq] there are somewhat standard ways of setting options on sockets to tell the OS to consider packet loss as packet loss and to avoid slowing down as quickly. But you have to know what these options are, and I'm pretty sure the OP's requirement of having `ssh foo.com` just work be complicated by TCP implementations defaulting to the "packet loss means congestion" behavior. Hmm... now that I think about it, I'm not even sure if the control plane options were integrated into the Linux kernel (or Mac or Wintel)

Life is difficult sometimes.
by reincarnate0x14 | 2026-01-23 01:32:12+00:00
The behavior exists to prevent a 3rd party from inferring keystrokes from active terminal sessions, which is surprisingly easy, particularly with knowledge about the user's typing speed, keyboard type, etc. The old CIA TEMPEST stuff used to make good guesses at keystrokes from the timing of AC power circuit draws for typewriters and real terminals. Someone with a laser and a nearby window can measure the vibrations in the glass from the sound of a keyboard. The problem is real and has been an OPSEC sort of consideration for a long time.

The client and server themselves obviously know the contents of the communications anyway, but the client option (and default behavior) expects this protection against someone that can capture network traffic in between. If there was some server side option they'd probably also want to include some sort of warning message that the option was requested but not honored, etc.
by ricokatayama | 2026-01-23 01:32:33+00:00
Usually, I'm not a big fan of Polyend products. They look cool, but they lack depth. Not the best tracker, not the best beatbox, etc. And also, I'm totally into Puredata and devices like Organelle, but the learning curve is steep. I get the idea of a vibe sound modeler. Not my alley, but that's interesting for a niche, I'd say.
by ipsento606 | 2026-01-23 01:32:35+00:00
Credit cards are many products rolled into one.

Despite the name, many people use "credit cards" simply for rewards and enhanced purchase protections, with only incidental use of the credit facility.

In the US market, it is surprising that someone would choose to use a debit card over a credit card (if they have the choice) because they are giving up the rewards and enhanced purchase protections, which are available at effectively zero cost.

If I used a debit card over a credit card, I'd effectively be paying ~2% more for most things I buy, for no benefit.
by genewitch | 2026-01-23 01:33:28+00:00
i went and got the raw data, wrote some code to parse it and then process it, and my results:

MMTS locations are so close to heat sources and heat sinks, at least in the US, that any sort of debiasing appears to be a "guess."

statistically. 96% of them. thankfully NWS/NOAA/NASA/etc have started deploying wireless sensors, but unless they admonish the volunteers for placing their (NWS/NOAA/etc) dumb MMTS designs so close to heat sinks and sources, as if it was their fault, demanding that volunteers move the sensors to a location 20 meters from said sinks and sources...

you're just gunna have and continue to have decades of literally unusable data. But hey, hottest year on record!

I am not mad at volunteers. it isn't their fault the MMTS devices only came with 10 meters or whatever of cabling for the indoor-outdoor data. I would, however, like to see the rationale and meeting notes and design documents (and the reasoning and arguments thereof) for the MMTS; explicitly for use tracking climate trends.

anecdote: i have multi channel humidity and temp sensors that log to SD card. they have been logging for a long time. My outdoor sensors, as well as our cars, etc, show that our location is always 7F cooler than the nearby metro (20 miles) during the warm months. If we used my temperature data, i'd believe the trends. if we use the temperature data from the sensors they use at the airport, it's going to show warming - and i submit you can't de-bias that using the methods used for the IPCC and other reports. and when i say 7F cooler here than there, i mean on the thermometers on our cars (and multimeters, or even a liquid-in-glass carried around!). I also mean my location is consistently cooler than the forecast temperatures for the city.

i understand weather is not climate.
Ask HN: Please wish me luck for my exam
by Imustaskforhelp | 2026-01-23 01:34:17+00:00
Not sure if this should be considered an ask HN or not

Currently going to give an exam for which I had to prepare for 2 years.

Currently in high school & in my country, its kind of the test to get into decent college. I get two attempts at it and its my first one and I genuinely just want to do good

I don't know, I have gone through a lot from being an absolute topper to struggling to everything in two years & none of it matters, what matters is right now and I don't know.

I do just want to be happy and to one day or today and just get into decent college so that I can actually do what I like with computers.

Wish me luck
by Rochus | 2026-01-23 01:35:23+00:00
> Connection Became Commodified ... Music is now background noise

It's rather the music itself which became a commodity, and it's not mainly background noise, but is reduced to a function (support certain moods, etc.). This becomes obvious when looking at the evolving statistics. More and more people just select and listen to anonymous playlists and don't care who played, composed or produced the music thei're listening to. They buy and consume music like water or potatoes.

> The financial reality for modern musicians is grim

That's it, and this development started at least thirty years ago. I remember well that the opening acts at our concerts were increasingly being replaced by DJs, and within a short time, more and more live gigs were being replaced entirely by DJs (people didn't care much). Studio gigs had long been hard to come by at that point. Today, more and more stars are going on stage without a band or even their “singing” is a playback. Spotify and the like have also wiped out the middle class, so that today it's mostly only the big stars who are known by name.

> AI Accelerates Everything

The market in which musicians could earn money was already broken long before AI. The record monopolists, who repeatedly claim to represent the interests of musicians, were at the forefront of filling their own pockets with services such as Spotify, and their actions against AI companies are also more than flimsy, as it is more likely that they want to use this technology to improve their own pensions and increase their margins even further by no longer needing composers or studios. According to the well-known Deezer study, 97% of people can no longer distinguish AI from human music anyway. And still we will continue to make music, and as before, barely anyone will notice.
by _pdp_ | 2026-01-23 01:36:10+00:00
We also use CLI tools for agents because it is obvious that they are good at it.

Our approach is slightly more complex because we need to supported fully authenticated sessions for end users and for shared credentials. It works by creating scoped API tokens to our service which get bundled into dynamically generated CLI clients. We point the agent to the client and voila. The agent can now run `some-command list-gmail-messages --query "tom"`. The oauth complexities, credential lifecycle and everything is handled automatically by the platform on the fly - it does not matter if the user is on Slack or access the agent through some chat interface or if the agent runs in the background doing work. It just works!
by Uptrenda | 2026-01-23 01:36:22+00:00
So tired of these posts about people jerking themselves off over how good they are because they used AI to shit out some trivial bullshit. Like, I'm glad you're saving time and money. That's what AI now does. It's what millions of other engineers here --already know--. But why do we have to know about it? Is it remotely noteworthy or unexpected? Why does HN continue to upvote this self-serving, gratuitous, bullshit? Do you guys want HN to look like OP for the next [however long] this AI hype cycle takes to reach saturation (probably another 5 years at this point.) Even the biggest AI soyboy will be sick of it by then.
by filloooo | 2026-01-23 01:37:43+00:00
Russia has always been selling it's oil and gas at a discount, that's why it had so much clout in the EU and CIS, nothing new, it's literally its geopolitical strategy since the Soviet Union.

All these talk of cutting off Russia won't last more than a year after the war, nobody refuses cheap energy, certainly not the cash strapped Europeans.

They'll probably be the world leader in critical metals and rare earth deposits if they invested more on prospecting and the ice melts.
by steveBK123 | 2026-01-23 01:37:55+00:00
You are young, you want to use a credit card to protect yourself and build credit history.

Using a debit card, in the event of fraudulent charges, the money is already gone from your bank account and now you are negotiating with your bank to get it back. With a credit card, you file the claim and its generally resolved before your statement closes and anything is due. Your card will also be immediately cancelled, so if its your debit card you will lose ATM access while awaiting the new card.

This will happen to you many times over the course of your lifetime, maybe every 5-10 years. Usually when a number is stolen, they speed run getting as many $1000s of charges in before the card is stopped, which would drain your debit card account.

Credit history is also important. If you don’t have a credit card and build basic credit history before your first job, you will have trouble signing a lease without a parental guarantor.
by danudey | 2026-01-23 01:38:51+00:00
Nadella's vibe lately (here and in his 2025 retrospective) seems to be "AI can be amazing and transformative and life-changing, and it's up to end users to figure out how to make that happen and they're not doing it and it's not our fault."

It's not even a solution in search of a problem, it's a tool in search of a reason to use it as a solution to a problem on such a scale that it justifies the billions of dollars of money we've poured into it while driving up the cost of fresh water, electricity, RAM, storage, data centre space, and so on.
Tell HN: We have not yet discovered the rules of vibe coding
by 0xbadcafebee | 2026-01-23 01:39:55+00:00
It just occurred to me that there are some things that should never, ever, be vibe coded. I think this is an important realization, because it means there are fundamental, societal limits to what we can do with vibe coding.

The first thing we should never, ever vibe code: cryptography. Building good crypto requires not only advanced understanding of mathematics, but also a deep knowledge of the history of cryptography and security, and you can not be wrong. You can't let a bug slip in, or hallucinate something. It has to stand up to years of scrutiny by world-class experts before it can be considered secure. And it may still fall to a technique nobody predicted. Not only can vibe-coding not guarantee any of that, it's so flawed that failure is virtually certain.

And there's other things that simply can't be allowed to fail. Flight control systems. Vehicle ECUs. Weapons systems. Nuclear power. Industrial controls for municipal water, power utilities, etc. Even if vibe-coding could approximate these things, nobody ever would (or should) trust it.

So while we're out here finding really fun uses of AI coding, we should also consider that there will be very real barriers to its use. The "old world" of coding will have to stick around. We're going to end up with two very different universes of software, with different companies, different staff, different rules. We may even have to update APIs/ABIs to mark when an input/output comes from an LLM, to prevent one component's hallucinations from "infecting" another system that needs to remain safe and reliable.
by dekhn | 2026-01-23 01:40:27+00:00
My favorite model of all time is this digital sundial:
https://www.thingiverse.com/thing:1068443
It's generated using code that knows the shapes of numbers and "punches them out" of a template object at different angles corresponding to angles of the sun/time relationships.

It would be impractical to make in any method than additive printing.
by machomaster | 2026-01-23 01:41:21+00:00
Severely downsizing or shutting down the military production, how has it been working to get it running again so far? And now imagine if Germany wouldn't have the luxury of hiding behind the Ukrainian/American/Polish/Finnish backs and would have to actually fight the war at the same time.

Well, returning the food production while the population is starving would have been an even harder problem.
by cosmic_cheese | 2026-01-23 01:41:57+00:00
Better fraud protection, too. Depending on the bank it can be a real battle to get fraudulent charges dropped and funds restored, but credit card companies go out of their way to make that process easy. Some even offer it as a function of their site/app so you don’t even need to make a call to get things resolved.

I have several cards and don’t keep a balance on any of them. They’re a tool with several uses, and one of mine is to be able to pay for things without exposing my debit card/bank account.
by westurner | 2026-01-23 01:42:31+00:00
> I doubt that it's common for anyone to read a research paper and then question whether the researcher's calculator was working reliably

Reproducibility and repeatability in the sciences?

Replication crisis > Causes > Problems with the publication system in science > Mathematical errors; Causes > Questionable research practices > In AI research, Remedies > [..., open science, reproducible workflows, disclosure, ]
https://en.wikipedia.org/wiki/Replication_crisis#Mathematica...

Already verifiable proofs are too impossibly many pages for human review

There are "verify each Premise" and "verify the logical form of the Argument" (P therefore Q) steps that still the model doesn't do for the user.

For your domain, how insufficient is the output given process as a prompt like:

Identify hallucinations from models prior to (date in the future)

Check each sentence of this: ```{...}```

Research ScholarlyArticles (and then their Datasets) which support and which reject your conclusions. Critically review findings and controls.

Suggest code to write to apply data science principles to proving correlative and causative relations given already-collected observations.

Design experiment(s) given the scientific method to statistically prove causative (and also correlative) relations

Identify a meta-analytic workflow (process, tools, schema, and maybe code) for proving what is suggested by this chat
by Twisol | 2026-01-23 01:43:25+00:00
I am young, but not so young as that. I do have a credit card, I just don't use it for anything except the monthly cost of server hosting (to keep it in use). Despite its disuse, I have an "exceptional" credit rating, probably mostly due to the age of the account. So I appreciate the point about credit history, but my habit of preferentially using debit doesn't seem to have been to my detriment on that front.

As to fraud protection, I agree, but as noted in another reply, I wish I understood why the protections afforded to credit don't also apply to debit. There must be some systemic reason for it that I'm unaware of. As it stands, my best guess is simply that "it's a perk to entice people to use credit".
by Centrino | 2026-01-23 01:44:14+00:00
Feedback about a technical aspect of your blog, not about the contents of the article: unfortunately the HTML title of the page is not the title of the article, but the title of your website.
As a consequence, when I print your blogpost to a PDF file to read it offline at a later time, the filename of the saved PDF has no clues whatsoever about what the article is about.
by horsawlarway | 2026-01-23 01:45:27+00:00
The honest answer is because I backup a large number of other things to backblaze anyways.

I went on a mission about 5 years ago to essentially stop paying for SaaS services if there was an opensource alternative available that I could self host.

I have old machines lying around anyways since I was upgrading about every 5 years for gaming. So I have a 5 node k8s cluster in my basement serving about 20 different services that I use, and I no longer pay for basically any subscription software.

Git is fine for text content, (hell, I have about 25 personal repos on github anyways, although speaking of... most are mirrored to a local gitea instance) but it's not a great solution for backing up DBs, binary data, media, photos, etc...

Eventually - I'll likely replace backblaze with a NAS at a family member's house, but for now - it's very cheap and the billing is fair (usage based billing, not the exorbitant monthly fees most SaaS services charge).

---

Plus - I really like the flexibility of web based services. I don't have to remember to sync anything with bookstack, I just hit 'https://bookstack.[mydomain]' in a browser from any machine I want - Friends house? works. Public library? works. Wife's phone? works. Work laptop? works. etc... you get the idea.

Even after accounting for the initial outlay for a large NAS and my extra power consumption - I broke even in just under 3 years self hosting. Turns out SaaS is sorta a scam if you're technically capable.

And absolutely more power to ya for finding your own alternative solution!
by OhMeadhbh | 2026-01-23 01:45:29+00:00
Or you could use anycasting to terminate SSH sessions on the moral equivalent of one of a number of geography based reverse proxies and then forward the packet over an internal network to the app server over a link tuned for low latency. The big guys already do something similar with HTTP over TLS for DDoS protection and to limit end to end latency on TLS.

Granted... it would increase the cost (since you're adding reverse proxies) but it would be a quick way to get acceptable latency, rudimentary DDoS protection, and you could try different connection options independent of the main app's logic.

It would be hard to estimate how much latency you're adding with a SSH2 reverse proxy in this case, but it's probably lower than one might think.

The idea of letting Claude loose on my crypto[graphy] implementation is about the most frightening thing I've heard of in a while [though libnss is so craptastic, I can't see how it would hurt in that case.] But I loved this write-up. It was readable and explained the problem the OP was encountering and proposed solutions well.
by fragmede | 2026-01-23 01:45:48+00:00
Why does it not seem likely that spammers would attack YouTube and try to use their redirector to attack users to you?

The pattern attackers would use is to figure out how to use the redirector at
hxxps://www.youtube.com/redirect?event=channel_description&redir_token=QUFFLUhqbGhxcFJubU9YV0RqWkY3bVlnQUdtZFBTSG5Dd3xBQ3Jtc0treWdqWS1ZX2tFdWlUa3NmY09tc2RUOFN6VUh5WDB2eTFGbE5hUTlFY25VZHROLVgyMVRJR2Mzd0QySUxidGNHYkNOd1FqQXNsTk1zcFBLWF83UHMxTDRIaGdsSGJfRjFveHlwNS1FbUt6bXg3TmhFRQ&q=http%3A%2F%2Fwww.penguinrandomhouse.com

to point at www.looks-like-youtube-but-is-phishing.ru instead of ww.penguinrandomhouse.com. Then, when the attacker manages to take over someone's Facebook Messenger account, they send "check out this cool youtube video" to all of that user's friends. Because the URL has the domain youtube.com, it's trusted, so the'll click on the link. If the redirector simply redirected, a non-zero amount of victims would then have a tab opened to www.looks-like-youtube-but-is-phishing.ru that says they've been logged out of youtube, enter your username and password to login and watch this really really funny cat video that your mom/boyfriend/sister/crush/whatever just sent you.
by cosmic_cheese | 2026-01-23 01:46:48+00:00
DE stuff is part of the picture, but there’s churn outside of those too. glibc, which is used in practically everything, is the classic example but across the whole of the Linux desktop sphere, it’s unusual for libraries to maintain compatibility.

The only reason why Linux desktops work at all is thanks to package managers and their maintainers doing the heavy lifting of keeping applications and the libraries they use in lockstep. If it weren’t for that random programs would be breaking every other update.
by nojs | 2026-01-23 01:47:09+00:00
I've noticed an uptick in

API Error: 400 {"type":"error","error":{"type":"invalid_request_error","message":"Output blocked by content filtering policy"},

recently, for perfectly innocuous tasks. There's no information given about the cause, so it's very frustrating. At first I thought it was a false positive for copyright issues, since it happened when I was translating code to another language. But now it's happening for all kinds of random prompts, so I have no idea.

According to Claude:

I don't have visibility into exactly what triggered the content filter - it was likely a false positive. The code I'm writing (pinyin/Chinese/English mode detection for a language learning search feature) is completely benign.
by krackers | 2026-01-23 01:48:01+00:00
No, doctors are smart enough as a group to have inserted themselves as middlemen and codified it into law, so it will not revolutionize healthcare in a meaningful sense of cutting through the bureaucracy. You may be able to use LLMs to get a suggested diagnosis once tests and symptoms are communicated, but you're going to need to go the doctor to get a referral for the tests/imaging, for formal recognition of your issue (as needed for things like workplace accommodations), and of course for any treatments as well.

At best and if you're lucky to have a receptive doctor you can use it to nudge them in the right direction. But until direct to consumer sales for medical equipment and tests are allowed, the medical profession is well insulated. It is impossible by regulation to "take healthcare into your own hands" even if you want to.
by alephnerd | 2026-01-23 01:48:20+00:00
> Foriegners (sic) cannot simply come to America and enroll their children for free schooling in the US. Not only is it economically unsustainable but it is theft of resources from everyone who has built and contributed to the system previously

My school district is shutting down elementary schools because there aren't enough children anymore [0]. We're one of the best public school districts nationally. "Foreigners" aren't eating up resources.

Doesn't matter anyhow - those of us who can afford to live in rich school districts win either way.

Culture wars are for plebs - those of us with money and network win either way.

[0] - https://www.smdailyjournal.com/news/local/school-enrollment-...