MurphyA/hacker-news huggingface dataset:
by ColinWright | 2026-01-31 21:15:48+00:00
The title I've chosen here is carefully selected to highlight one of the main points. It comes (lightly edited for length) from this paragraph:

Far more insidious, however, was something else we discovered:

More than two-thirds of these articles failed verification.

That means the article contained a plausible-sounding sentence, cited to a real, relevant-sounding source. But when you read the source it’s cited to, the information on Wikipedia does not exist in that specific source. When a claim fails verification, it’s impossible to tell whether the information is true or not. For most of the articles Pangram flagged as written by GenAI, nearly every cited sentence in the article failed verification.
by PEGEBE | 2026-01-31 21:15:50+00:00
Having the right people around you does not only motivate you, but can also helps you with Product-Market-Fit(PMF), defining Minimum Viable Product (MVP) and Go-To-Market (GTM).

I'm building a community of founders that are ready to partner up. The only requirement are:

As a tech person: you have shipped a product ($0 revenue is totally fine!) and you can proof it. (not just a Github repo)

As a non-tech person: you have build an audience, landing page, wait list, investor contacts or pitch decks and you can proof it.

Current number of members: 75+

Please DM
by ghurtado | 2026-01-31 21:16:10+00:00
I have to assume you have never worked on security cataloging of third party dependencies on a large code base.

Because if you had, you would realize how ridiculous it is to state that app security can't be assessed until you have read 100% of the code

That's like saying "well, we don't know how many other houses in the city might be on fire, so we should let this one burn until we know for sure"
by jccooper | 2026-01-31 21:16:26+00:00
It's a mid-50s bomber. The skin will be easy to replace. Drill out the rivets, rivet on new sheet metal. I don't think it even dragged the wingtips.

Might be some complications with the nose gear and the payload bay (the main gear is on the wings, and untouched) but nothing terribly complicated. I wouldn't be at all surprised if it was designed with some assumption of belly landings; it's a warplane after all.

Repairs surely isn't automatic, and who knows how tight that's program's budget is, but planes are repaired from such landings all the time, and if they attach any value to the vehicle it can be repaired, and not at great cost.
by frumplestlatz | 2026-01-31 21:16:46+00:00
That’s not what was argued. “The hard way” refers to institutional difficulty, not illegality — specifically, enforcing federal law in the face of state non-compliance and sanctuary policies.

Difficulty does not equal unconstitutionality. If you think the measures required violate specific constitutional provisions or civil-rights protections, name them and explain how.

Otherwise, this is an empty moral reframe that clumsily sidesteps concrete claims about enforcement feasibility and changed conditions.
by striking | 2026-01-31 21:17:08+00:00
A DS set to Auto mode will boot to the cartridge (and you can reflash the firmware to skip the health and safety screen). From there the OS is replaced with whatever is on the cart. A flashcart with the right shell will boot right into whatever app you want (and you can soft reset the console with a key combination to switch apps).

3DSes require a little more work and have a longer boot chain, but it's been thoroughly broken all the way to the bootstrapping process so you can use whichever firmware version and whatever patches you like with enough effort.
by djeastm | 2026-01-31 21:17:14+00:00
A developer spinning up greenfield projects in technologies they would never have touched without AI are probably going to use whatever AI suggests (or chooses without asking) because they have nothing else to compare it to. Like a webdev who wants to build a mobile app will possibly auto-approve a lot of the choices just to get something up and running. And as we all know, the prototype-to-production train is hard to stop.
by vbezhenar | 2026-01-31 21:17:17+00:00
I worked on a system which used Oracle 9i database run on Itanium with HPUX OS.

User-facing side was written with Delphi 7 (quite a huge client application, it even had constructor to build new forms inside the application and GUI to build algorithms, like n8n of 90-s, I learned a lot working on that system).

I've used Java 6, then migrated to Java 7 to write some new components for that system with web UI. I was bad at Delphi and they didn't really care about consistency, so I went that route.

AFAIK this system is in use nowadays. They wanted to update it with modern database and other modern stuff 15 years ago. They wanted to update it every year since that, but every year this modernization project is postponed. So probably one day they'll replace everything, but so far it works.

I won't delve into details, but this system serves as a database of criminals and some other stuff for a small country, so it's actually quite important one.

TBH I don't think that AI could even build it. When I had to build it last time, the build consisted of several VMs. You had to build various DLLs and then build final application. Every part was built in a separate VM with separate installed Delphi components of a specific versions. It was a huge mess.
by pizlonator | 2026-01-31 21:17:26+00:00
> I mean, they tried. They just tried and failed.

They tried to do something that probably would have looked like Copilot integration into Windows, and they chose not to do that, because they discovered that it sucked.

So, they failed in an internal sense, which is better than the externalized kind of failure that Microsoft experienced.

I think that the nut that hasn't been cracked is: how do you get LLMs to replace the OS shell and core set of apps that folks use. I think Microsoft is trying by shipping stuff that sucks and pissing off customers, while Apple tried internally declined to ship it. OpenClaw might be the most interesting stab in that direction, but even that doesn't feel like the last word on the subject.
by ahartmetz | 2026-01-31 21:18:03+00:00
For most of the (sadly not shorter) life of PulseAudio, ALSA was more reliable, but at some point, Firefox got a new audio backend that straight up dropped support for ALSA, and a few games started crashing with backtraces indicating audio trouble when not run with PulseAudio. I've had to deal with PulseAudio's dropouts under load, latencies and lockups for 2-3 years before PipeWire became a viable replacement.
by columk | 2026-01-31 21:18:13+00:00
Unless you're swamped with email I don't really get it. If someone calls me to arrange an appointment I say "Hey Google add x to calendar" after the call and it's done. Gemini can use Gmail and other workspace apps. You can also set up commands to do a few different things at once, like turning on the lights when you get home by saying I'm home. With any cheap set of bluetooth earphones this is all hands free.

Lots of these YouTubers are using openclaw to replace simple Google/Siri voice queries with something prohibitively complex, expensive and insecure.

Also, people in the 90's didn't have push notifications. We see emails on our watch/phone and can delete/archive/snooze from there. Email triage takes zero time these days and can be done from anywhere.
I do get it though if you're someone who is extremely busy and really needs a PA.

Much more likely that the average user is either unemployed or in the leisure class.
by wlesieutre | 2026-01-31 21:18:13+00:00
My opinion on that may be colored by the fact that I had a Surface Pro 3, the one place where Windows 8.1 was actually great to use, and taking away some of the focus on tablet use was a regression. Overall you're right though, outside of tablets W10 was an improvement, because 8 tried to stick the tablet UI into desktops.

I was recently connecting to some server with the Windows 8 derived version of Windows Server and gosh that full screen start menu is stupid with a mouse.
by WCSTombs | 2026-01-31 21:18:21+00:00
> If I were a film professor today, hell even 20 years ago, I would not expect a modern film student to sit through that whole thing.

Sorry, but this to me sounds completely insane. We're not even talking about the general population here, but people who are ostensibly serious about the art and craft of film making. And the bar is being set at literally just watching the movie, and not even some obscure marathon of a film that takes a degree to be appreciated, but a major mass-released picture that has already been enjoyed by countless people.
by tzs | 2026-01-31 21:18:56+00:00
The problem with that is if someone gets a hold of the logs from both the centralized service and the social media site they can compare timestamps and may be able to match them up.

Most people will be doing the whole process (site gives token, person gets token signed, person returns token) as quickly as possible which limits the candidates for a match. Worse, if the central service is compromised and wants to make it easier for log matching to identify people they could purposefully introduce delays which would make it easier to distinguish people.

Most people will use the same IP address through the verification process which would really make it easy.
by ryandrake | 2026-01-31 21:19:05+00:00
I don't think people can focus on any movies anymore, period.

I used to host movie night for the friend group, because I was the one with a decent home theater setup, but we stopped because people just can't get through movies anymore. Same with family. We'd always put on a movie at night when family were over for a visit, but we don't anymore. Within 5 minutes of the movie starting, everyone's on their phones or getting up to do other things. Why even bother hosting?

I even let the guest(s) choose the movie so they're not subjected to all that boring "character development" and "establishing shots" in movies I go for, and they still can't make it more than 5-10 minutes. My teenage kid can't even make it through movies with zero quiet parts, designed specifically for that age group. Not into it at all--she puts YouTube on at 2x-2.5x speed and "watches" two videos at a time while playing video games.
by coppsilgold | 2026-01-31 21:19:36+00:00
No closed-source E2EE client can be truly secure because the ends of e2e are opaque.

Detecting backdoors is only truly feasible with open source software and even then it can difficult.

A backdoor can be a subtle remote code execution "vulnerability" that can only be exploited by the server. If used carefully and it exfiltrates data in expected client-server communications it can be all but impossible to detect. This approach also makes it more likely that almost no insider will even be aware of it, it could be a small patch applied during the build process or to the binary itself (for example, a bound check branch). This is also another reason why reproducible builds are a good idea for open source software.
by CamperBob2 | 2026-01-31 21:19:53+00:00
It would be great if we had line-item vetoes on our tax forms. However, we don't. You have to fund some things you don't like or agree with, and so do I, and so do the rest of the taxpayers.

That's just how taxes work. Like capitalism and democracy, taxes suck, but nobody has come up with adequate substitutes that check all the necessary boxes.
by dgfl | 2026-01-31 21:19:54+00:00
You’re free to vote towards your goals, or move to countries which invest basically nothing in research. There’s plenty of them. I suspect you may not enjoy such great quality of life there.

In case it wasn’t a rhetorical question, they’re in your interest because through the process of building them we improve our understanding of the world, develop new technologies which the industrial system wouldn’t have backed, educate the next generation of engineers and scientists, and inspire the kids that will form the second next generation.

Private research already exists and works well in some fields, mine included. But public research is just as important since it can afford higher risk and longer scope. You can’t begin to count the startups that were created as spin-offs of university research groups.
by alexjplant | 2026-01-31 21:19:54+00:00
Reddit has been a cesspit of populist image macros and low effort reply comments for a decade plus. Enthusiast subreddits are astroturfed to hell and back by people with a Shopify storefront and a dream trying to growth hack their way to a hockey stick. The low barrier to entry to each community means that this vapid culture eventually diffuses itself across subreddits that might otherwise be good.

I don't care if I sound old and salty when I say this: I miss phpBB and Invision forums. Even those (Xenforo now, I suppose) are being bought up by marketing companies to sell ads.
by _flux | 2026-01-31 21:20:05+00:00
I can imagine situations where the emergency is noticed by other people that might not be near the location itself, and the person whose location would need to be determined is not able to use the mobile phone, such as could be the case in many accidents.

I think it would be sufficient to just have a log of this information being queried, and cases where the information has been pinged without a legitimate use case would the be investigated.
by dangom | 2026-01-31 21:20:35+00:00
The choice happens implicitly rather than explicitly. If Claude tries an approach and hits a wall, it'll try a different approach. If an API call keeps not working, it'll choose a different API. It a tool is broken, it'll use something else. If it can't find docs nor read the code, it'll try to implement functionality from scratch. If you give it messy tools with confusing docs, you'll notice Claude not calling them as you'd expect, and instead trying something simpler instead.
by novaRom | 2026-01-31 21:21:26+00:00
Interestingly, some other products are also cheaper today than few months ago:

Basmati rice: -25% (2.5 Euro/Kg)

Pork: -25% (7-8 Euro/Kg)

Butter: -33% (4 Euro/Kg)

Coffee beans: -25% (10-12 Euro/Kg)

Chocolate: -15% (20-30 Euro/Kg)
by bccdee | 2026-01-31 21:21:49+00:00
> I generally don't skip forward but I did on several parts of Pluribus. There were several segments that were clearly just filler

When I read the post you're replying to, my first thought was, "sure, some movies are boring. But I bet they're talking about stuff like Pluribus, not actual boring movies."

Pluribus has no filler. Sure: the plot moves slowly, the cinematography is artsy and sedate, and it's all very character-driven. So what? It's beautiful. You may as well go to an art gallery and say the story moves too slow. Look at the stuff on the screen. Take it in. You don't have to like it, but maybe don't assume that Vince Gilligan is wasting your time with filler to make a quick buck. Consider that you might be holding it wrong.
by nateberkopec | 2026-01-31 21:21:52+00:00
I spent ~5 years volunteering for a search and rescue team in New Mexico.

We definitely got the cellphone tower triangulation data. I never once saw GNSS data provided by a carrier. We used FindMeSAR https://findmesar.com/, the subject would usually text back the coordinates from the phone.

Just one data point.

The revolution that's occurred since my SAR volunteer days is the wide availability of satellite messenging on consumer phones. I'm guessing that's really changed the situation quite a bit.
by dyauspitr | 2026-01-31 21:21:52+00:00
These ID verification laws aren't simply designed to confirm that someone has access to an >= 18yo ID. They are identity verification to try to confirm that the person presenting the ID is the same person who is using the site.

This makes no sense. This is exactly like asking someone older to buy you beer. Will there be rule breakers? Sure but they will be in the overwhelming minority.
Show HN: Hackmenot – Security scanner for AI-generated code
by b0rd3aux | 2026-01-31 21:21:54+00:00
Hey HN! I built hackmenot because I kept seeing the same security vulnerabilities in AI-generated code.

The problem: AI assistants optimize for "code that works," not "code that's secure." They routinely generate SQL injection via
f-strings, hardcode API keys, use os.system() with user input, and pick weak crypto like MD5.

What hackmenot does:

- 100+ rules purpose-built for AI code patterns
- Python, JavaScript, Go, Terraform
- Auto-fix mode (hackmenot scan . --fix)
- Detects hallucinated packages (dependencies AI made up that don't exist)
- Sub-second scans with caching
- GitHub Action with SARIF support

Install: pip install hackmenot

It's Apache 2.0, no API keys needed, works offline.

Would love feedback on the rules coverage and any patterns I'm missing. Happy to answer questions!
Is there a platform for devs to share repositories in hopes of OSS contributors?
by anshyyy | 2026-01-31 21:21:55+00:00
Title. Asking as most popular ML open source (OS) projects (vLLM, pytorch, etc) I'm interested in generally are extremely saturated with large numbers of contributors swiping good-first-issues immediately. Attending weeklies for some of these projects doesn't seem to really increase chances of grabbing an issue to chew on due to the incredibly freaking large supply of devs.

Honestly just looking for a mid-sized project to make a first contribution to that isn't tailed by over a million devs fighting for a PR. Are there websites (or some GitHub explore page, honestly, would solve this) to explore and find useful *unsaturated* projects that would benefit from a contribution?

At the risk of being too greedy, if the answer is yes, then can we filter projects by domain/application?
by pembrook | 2026-01-31 21:22:07+00:00
Watching people cheer this on uncritically without thinking through what this actually means in practice (the end of privacy on the internet, forever)...just because of some silly moral panic and people being too lazy to parent their kids...it's just sad.

Unfortunately, rationally thinking through 2nd and 3rd order effects is hard. As we see on social media, appeals to emotion drive the highest engagement, and "think of the children" is the ultimate emotional appeal.

But hey, with European countries moving to tie all internet activity to their national ID system to "protect the children from social media" and "ban speech we don't like" maybe we can finally get rid of those cookie popups?

Making Lambi Toilet Paper jump through bizarre hoops when targeting their toilet paper ads to people seems silly now...given we're voluntarily handing our browser history & permission to access the open web to a much more powerful entity (the government). Consumer goods companies combining your IP address and email address together for the purpose of selling you more toilet bowl cleaner...becomes a bit of a moot point, no?
by strcat | 2026-01-31 21:23:35+00:00
Connecting a cellular radio via USB provides far less isolation than the approach of a tiny kernel driver connected to an IOMMU isolated cellular radio on mainstream devices. USB has immense complexity and attack surface, especially with a standard Linux kernel configuration. Forensic data extraction companies mostly haven't bothered using attack vectors other than USB due to it being such a weak point. Many of the things people claim about cellular radios in mainstream smartphones are largely not true and they're missing that other radios are implemented in a very comparable way.

Cellular, Wi-Fi, Bluetooth, GNSS NFC, UWB, etc. do get implemented on secondary processors running their own OS but on mainstream smartphones those are typically well isolated and don't have privileged access to other components. The cellular radio in an iPhone or Pixel is on a separate chip but that's a separate thing from it being isolated. Snapdragon devices with cellular implemented by the main SoC still have an isolated radio. Snapdragon implements multiple radios via isolated processes in a microkernel-based RTOS where the overall baseband is also isolated from the rest of the device. There are a lot of lower quality implementations than iPhones, Pixels and Snapdragon devices but the intention is still generally to have the radios isolated even if they don't do it as well as those.
by thinkzilla | 2026-01-31 21:23:44+00:00
Making estimates is fine, but we should be clear that they are (provably) just opinions.

http://scribblethink.org/Work/kcsest.pdf

https://news.ycombinator.com/item?id=13731975

https://www.amazon.ca/Limits-Software-People-Projects-Perspe...
by ssl-3 | 2026-01-31 21:24:19+00:00
We're only discussing one particular website, though, aren't we?

Except for on the TV (where I use SmartTube), all of my Youtube activity is done with web browsers.

Otherwise: On both big computers and with my pocket supercomputer alike, that means Firefox and uBlock Origin. It works quite well for navigating Youtube's website and watching videos.

An old iPad that I have suffers from Apple's deliberately baked-in lack of choice, but it does handle Youtube's website very well with Safari and AdBlock.

It has been a very long time since I've used Youtube's app on any device at all.
by themafia | 2026-01-31 21:24:19+00:00
> We aren't going to remove the security state

What security state? They aren't doing this for anyone's safety. This is the surveillance and parallel construction state.

> What needs to happen is accountability.

No agency can have this power and remain accountable. Warrants are not an effective tool for managing this. Courts cannot effectively perform oversight after the fact.

> The only way to stop the rampant abuse is to treat data like fire.

You've missed the obvious. You should really go the other direction. Our devices should generate _noise_. Huge crazy amounts of noise. Extraneous data to a level that pollutes the system beyond any utility. They accept all this data without filtering. They should suffer for that choice.
by lukec11 | 2026-01-31 21:24:35+00:00
Boost Mobile (under Dish Network), until a few months ago, ran their own custom-built 5G network that covered about 30% of the US population. They built it after the acquisition of Sprint by T-Mobile, in an effort to maintain a fourth nationwide wireless carrier.

Unfortunately Boost/Dish struggled significantly with finances and customer attraction post COVID, largely due to two problems (seamless roaming between their own network and partners’, and more importantly, getting manufacturers like Apple to build compatible phones). When the current president came into the picture, the FCC essentially forced the sale of Dish’s primary spectrum licenses to administration-friendly SpaceX, for future Starlink use.

As of now, they are in the process of moving their customers to AT&T (and possibly a secondary agreement with T-Mobile), but they seem to be maintaining their own network core - that’s likely why they’re able to implement support for this, while AT&T does not.
by irl_zebra | 2026-01-31 21:24:43+00:00
I am a huge, huge AI hater. I hate, hate, hate all the "Show HN: My Latest AI Slop App That Sucks and Required No Creativity to Think Up or Vibe Code and is Useless and I am a Useless Void of a Person for Having Created It." I say that to give context to say that this is the first legitimately useful "Show HN" I have seen in this AI sphere. It's really great, it seems to work quite well (I am an amateur mandarin speaker, I "know" about 5,000 words, so can vaguely judge) and fulfills a legitimate use case. I would pay you to use this once the model improves a little bit. It's really fantastic. You did well.
by einpoklum | 2026-01-31 21:25:14+00:00
> The law makes the driver of a vehicle liable for the operation, as it always has.

So, either those Tesla's don't really self-drive (which may be the case, I don't know, but then the whole discussion is moot), or they do, in which case, the human wasn't the one driving and may thus avoid liability.

Then of course there is the possibility that the court might be convinced the car was being drive collaboratively by the human and the car/the computer, in which case Tesla and the human might share the liability. IANA(US)L though.