MurphyA/hacker-news huggingface dataset:
by mrguyorama | 2026-01-09 18:25:56+00:00
You specifically need a culture that considers "Unskilled labor" to be an oxymoron. Where a literal assembly line worker feels like they have enough expertise to say "No, this is a problem worth stopping production over".

American car companies for example have always preferred to just keep the line moving and have a later QA step fix up the problem, or literally push the problem onto the dealer.

You need to treat even your low employees as not replaceable cogs in a machine.

This is the opposite of what American business school culture has taught for decades, which is why Toyota was unable to teach GM how to do what they were doing.

Not only did GM managers not do a good job of respecting their employees, but decades of that lack of respect meant that the employees didn't trust management enough to play along with the system in good faith. Everyone was "Defecting" and it makes everyone worse off.

Yet Japan DOES have a strictly hierarchical work culture, where openly countering something your boss says isn't exactly welcome. So I wonder how this sort of "Trust your employees to have good ideas" thing came about.
by JohnFen | 2026-01-09 18:26:04+00:00
Because Kagi Search is a service I subscribe to. A browser is a program I install. That difference means everything.

But since I have your attention, I just want to add that I'm a huge fan of Kagi Search and it's well worth the money I spend for it. I love the work you guys are doing, and that love is the reason why I'm even thinking about using Orion. But they are two entirely different use cases.
by RickJWagner | 2026-01-09 18:26:08+00:00
Calling it a murder is conjecture. Investigations are still underway, and nobody has been charged.

Personally, I believe that if someone is intentionally driving a vehicle at you ( and especially if they strike you ) it is a considerable mitigating factor. You can’t just go around pushing cops out of the way with your car when trying to avoid arrest.
by chrismorgan | 2026-01-09 18:26:14+00:00
I should also mention that that 35 kB is uncompressed—gzipped, it’s 13 kB, and with brotli it’s 11.3 kB.

Meanwhile, an empty React project seems to be up to 190 kB now, 61 kB gzipped.

For startup performance, it’s fairly well understood that image bytes are cheap while JavaScript bytes are expensive. WebAssembly bytes cost similar to images.
by yannyu | 2026-01-09 18:26:23+00:00
This is an interesting idea, I think clickbait titles are one of many problems with our engagement-based social media tools today. For the sake of experimentation and transparency, here's the suggested titles from ChatGPT 4. They seem to be more descriptive and accurate overall.

---

Possible alternative titles that better match the article’s content:

How Phishers Are Using SendGrid to Target SendGrid Users with Political Bait

– Accurately reflects the mechanism (SendGrid abuse), the audience, and the novel political/social-engineering angle.

SendGrid Account Takeovers Are Fueling a Sophisticated Phishing Ecosystem

– More technical / HN-native framing, avoids culture-war implications.

Phishception: Politically Targeted Phishing Sent Through Compromised SendGrid Accounts

– Highlights the core insight and the self-reinforcing nature of the attack.
by reify | 2026-01-09 18:26:25+00:00
The magic pill

https://www.youtube.com/embed/tqGMZWMhjUo

https://yewtu.be/watch?v=YheEMSW2x38

https://yewtu.be/embed/tqGMZWMhjUo

do not eat food that has been squirted out of a machine, Its not human food
by qsort | 2026-01-09 18:26:28+00:00
Also Italian. I think everybody sucks here?

Most Italian authorities like this one are chock full of incompetents, and I'm almost sure they're just caving in to some soccer broadcaster or some crap like that. He might very well be fully correct on the fact of the matter.

Still, the rhetoric of the post is frankly disgusting. No, I'm not taking lessons in democracy from JD Vance, thank you very much. No, I don't think that might makes right and it's unsurprising that those who believe otherwise are so eager to transparently suck up to this administration.

Making public threats in this way is just vice signaling, nice bait.
by mike_hearn | 2026-01-09 18:26:48+00:00
These types of discussions on HN get confused because people aren't always clear what they mean by the word "rooting".

There are two ways to root a phone:

1. Unlock the bootloader, install a well designed and highly secure aftermarket OS, relock the bootloader. The device is still just as secure against malware as it was before. Remote attestation shows the vendor that you're running Graphene or Lineage or whatever.

2. Exploit a local vulnerability to drop a sudo binary somewhere. RA shows you're running an exploitable version of Pixel Android, etc.

(2) is absolutely exploitable by fraudsters. They convince the user to run an app or visit a website that exploits their browser or whatever, and the vulns are used to escalate to root and keep it. Now when the user logs into their banking app the HTTP requests are rewritten to command the bank to send money to the adversary. This is why devices that allow escalation to root are excluded via remote attestation.

(1) isn't but it requires more coordination than the industry has proven capable of so far. Binary images of a custom OS could in theory be whitelisted by banks if it was known to be as secure as other operating systems. But there's no forum in which that information can be exchanged. Like, RandOS turns up and the maintainer "xyzkid", identity: anime avatar, claims his OS is super secure. How does random overworked bank developer John Smith know if this is true or not? RandOS doesn't come with any audits, it doesn't have a well paid security team. The brand is a big question mark. And if John makes the wrong call, maybe the bank is now on the hook for millions in losses because some idiot installed RandOS to get the shiny icon theme or whatever, and then got hacked.

So it's a hard problem. It's not actually a technical problem. Remote attestation is very general. The hard part isn't the tech. It's a social problem. How do you create and rapidly communicate trust in a new binary OS image if you don't have the security resources of an Apple or a Google or a Samsung?

There's an alternative of course: go full libertarian. Means, just use a "bank" that doesn't care if its users get hacked. This is what the Bitcoin community enabled. It's there if you want it.
by overfeed | 2026-01-09 18:26:56+00:00
Having "Fuck You" money[1] means you don't have to listen to anyone (but you still can be shunned, as described in the article). You'll substantially greater wealth that FU money to make people listen to what you have to say and be "uncancellable", like owning a media outlet, hiring a PR firm, or buying a pet politician or seat in government. Amjad seems to have crossed from the former to the latter by economic power: not only can a deal with him now could potentially generate lots of wealth, but it may not be a good thing to be on his shit-list later when he is the bigger fish.

1. A subjective amount that depends entirely on the lifestyle, burn rate and life expectancy.
by qwery | 2026-01-09 18:27:05+00:00
I don't really know Ruby, so maybe I'm missing something major, but your commit messages seem extremely verbose yet messy (I can't make heads or tails of them) and I'm seeing language like "deprecated" and a stream of "releases" within a period of hours and it just looks a bit like nonsense.

Don't take "nonsense" negatively, please -- I mean it looks like you were having fun, which is certainly to be encouraged.
by wrxd | 2026-01-09 18:27:49+00:00
I think the fine is wrong, but the attempt to weaponise JD Vance and Elon Musk doesn’t look well at all.
The next time they see something they don’t like hosted/protected by Cloudflare they will only have to ask more or less nicely and there is a good chance Cloudflare will handle it for them
by zzzeek | 2026-01-09 18:27:59+00:00
right, so on the topic of "phishing emails designed to elicit enough emotion that you forget to consider the button might be a phish", the headline itself of this blog post is doing the exact same thing, really. The headline should be, "Phishing scams launched through SendGrid exploit deep political sentiments to achieve success" or something like that.

but that would be clear and very boring. nobody would read your blog then. A headline that very obviously implies Sendgrid the company supports ICE, and so much so that they are emailing all their customers about it, clicks galore. Well done.
by hersko | 2026-01-09 18:28:05+00:00
Hmmm...

apartheid /ə-pärt′hīt″, -hāt″/
noun

- An official policy of racial segregation formerly practiced in the Republic of South Africa, involving political, legal, and economic discrimination against nonwhites.

- A policy or practice of separating or segregating groups.

- The condition of being separated from others; segregation

Explain to me how this does not fit bullet point 2 and 3.

From The American Heritage® Dictionary of the English Language, 5th Edition[1].

[1] https://www.wordnik.com/words/apartheid
by jedwhite | 2026-01-09 18:28:21+00:00
The constraints work consistent with Claude’s -p mode. It is isolated from your regular Claude interactive sessions and settings on purpose. And that makes it safer by default because you have to explicitly add permissions.

You can try this out and you’ll see what I mean if you run a few simple examples. This approach was based on experimentation and trying to be consistent with Claude’s own philosophy here.
by techblueberry | 2026-01-09 18:28:22+00:00
Eh even if it were homemade potato chips, you probably shouldn’t be eating that many carbs at least as a habit.

The point is, UPF seems to be a scare word for “bad” and not like a solid unique definition of bad things.

Does RFK Jrz take a protein shake and / or supplements? I’m sure those qualify as more ultra processed than the chips.
by baincs | 2026-01-09 18:28:37+00:00
> we may see the rise of “developer-less” companies.

I think the opposite trend will also emerge and more than offset this. Yes, vibe coded tools may fit the needs of low-stake applications for some companies, but if it was low-stake enough to start with, they likely didn't hire many devs, if any.
More likely we'll see non-tech companies starting to hire a dev to build custom software (e.g., ERP) suitable for their use cases vs. buying SaaS and paying consultants to customize it.
by dnw | 2026-01-09 18:28:43+00:00
When I read the title I thought you made a challenge Claude couldn't solve but that's not what you are doing. You are taking a pragmatic approach to the world we live in. I like it.

- It would be good to put what you are planning to learn from this interview process.
- Looks like submission is only a text file. Why not ask for chat transcript?
- Also, would be useful to let people know what happens after submission/selection.
by callc | 2026-01-09 18:28:45+00:00
I agree in theory. In practice people who are automated out of jobs are not taken care of by society in the transition period where they learn how to do a new job.

Once having a job is not intimately tied to basic survival needs then people will be much more willing to automate everything.

I, personally, would be willing to do mind numbing paperwork or hard labor if it meant I could feed myself and my family, have housing, rather than be homeless and starving.
by pannolino | 2026-01-09 18:28:47+00:00
Another italian here; while this whole situation is bad and piracy shield is definitely not the solution, having the cloudflare CEO that threatens to remove free-tier service makes me wonder. They offer a free pill, just to be the "powerful" guys that threaten people when they are paying some million euros.

Well done my friend. :-) I'm already moving websites off cloudflare. bye!

P.S: I believe piracy shield is a s*t idea naturally.
by xorcist | 2026-01-09 18:28:50+00:00
> If the government wants to add a small change to the tax code [...] they'd have to hire the same company that wrote it

This is a very strange statement and you probably have some specific situation in mind that isn't really representative.

Normally when you hire people to write your code they do a work for hire, unless your contract says otherwise, you own the rights. There are some minor exceptions, typically for countries that treat commercial and artistic copyright differently, but that's it. I've been hired to add changes to people's software thousands of times, and it's never been on the table that I get some kind of ownership of their source code.

The license said source code is under is completely irrelevant. Especially in this question of tax authorities. That source code is normally not under some public license at all because it's their internal processes anyway, they may change at any time and the employ a number of programmers to do so. Plus a handful of consultants.
by Thorrez | 2026-01-09 18:29:03+00:00
>They should improve because it's the decent thing to do. By doing the decent thing, the praise would have been tenfold, which is the best incentive.

Those 2 sentences don't really align well. Should they be motivated by the tenfold praise? Or should they be motivated by doing the decent thing? If they should be motivated by doing the decent thing, why mention tenfold praise?

>Rewarding them for "reluctantly" improving won't change their bad behavior.

I don't see why not. They see that good behavior gives a better outcome. They'll do good behavior in the future.
by socalgal2 | 2026-01-09 18:29:19+00:00
> He phrases it to be as if the free tier is a favor Cloudflare does to the world, as if it's not obviously a loss-leader designed to get more people into the Cloudflare ecosystem.

It can be both. I run many open source websites behind cloudflare.

It's the same as github. All the free hosting and free CIs and free issues/discussion forums, and free code review for open source repos (90% of all open source projects?) happens to be a a loss leader as well.

Both are still a huge free contribution to the world. They don't have to do it. They could just have zero free anything.
by kuon | 2026-01-09 18:29:27+00:00
I'm a kagi user, and as many have said, I will not use Orion until it is open sourced.

I understand your position, but a web browser is so important a software that it must be open.

I also think that you can still sell it even if it is open source.

Also, you might be able to secure funding from governments that want to move away from closed source solutions.

Anyway, still congratulation for v 1.0, and I hope it will go well.
by Aerroon | 2026-01-09 18:29:57+00:00
This is true, but I don't think our understanding of nutrition is good enough to really pick and choose what we want to optimize for. Eg we still don't have a recommendation on whether we should costume external vitamin K2 or not. The same goes for many amino acids. Some of the non-essential ones can have interesting effects when taken alone, eg glutamine - seems to help the gut lining. (We also don't know whether that's perfectly safe due to cancer risks, because some cancers eat glutamine.)
by ericmcer | 2026-01-09 18:30:08+00:00
Agree in general, it would be awesome for AI/LLM/whatever to act as an interface between devs and a highly efficient machine only coding language. All the abstractions we have built to make coding easier could be done away with. No C, no compilers, no HTML/CSS, just machines talking to machines without all the clumsy stuff humans need to make sense of it.

But... Anyone who has vibe coded knows that world is really far away, our careers will be over before it is here. This is like saying we should be telling kids to use Waymo instead of learning to drive. It is a nice dream but I am definitely not gonna bet on it.
by kykat | 2026-01-09 18:30:26+00:00
This is the same old "developers are too focused on quality" story, is focusing on customers important? Yes. Is it the job of the "developer", usually, no.

I've seen it in juniors and in myself, entering into a company excited after hearing all these advices, and realizing that the job is really to "just code".

You do not communicate with the customer, you do not decide the business direction, you simply code, and make sure there are as little issues as possible (usually not stated explicitly), and that new features (as requested by management/customers) are implemented as quickly as possible.

I don't know how to respond to this "developers shouldn't focus on quality" argument any more. Is shipping fast important? Of course. Is understanding the customer important? Definitely. But why is there always this animosity towards "developers focused on quality"?

Where I worked my experience has been the exact opposite, many coworkers have been writing slop long before LLMs were popular, all kinds of horrible hacks, the constant talk about quality was not "we are working on quality all the time", but "quality is so bad my life is so painful".

So, my question to all that fight this "quality obsessed developer" is: Why have I never met any developer obsessed about the code quality, but I hear about them all the time?

EDIT: To be more concise, I think that the "perfectionist developer" is simply a scapegoat for the inherent difficulties and challenges of software development.
by cosmic_cheese | 2026-01-09 18:30:30+00:00
I think this is great. True native Linux-first power user browsers are nearly an entirely unserved niche. We've had them on macOS in various forms over the years (with OmniWeb being the original), but for a long time the only browsers built to integrate well with Linux desktops were minimal and light on features (like the WebKit version of GNOME Web/Epiphany).

It probably matters less to Linux users who do the minimal tiling WM thing, but as someone more drawn to traditional floating DEs it's always bothered me how alien the browsers one might actually want to use feel running in a GTK or Qt DE. Themes can help reduce the gap, but it never disappears — that last 10-20% always remains as an unavoidable side effect of how the big browsers are built, with it being particularly pronounced with Firefox and derivatives.

Of course a GTK based browser like Orion isn't going to feel the best under a Qt desktop like KDE, but GTK themed to match Plasma is a good deal closer than the bespoke UI found in e.g. Firefox or Chrome.
by alphadatavault | 2026-01-09 18:30:35+00:00
It’s refreshing to see a "retro" project that isn't just about aesthetic skins or scanlines, but about actual functional behavior. We’ve gained a lot with modern window snapping and search-first workflows, but we’ve lost the sense of "place."

I’m particularly interested in the choice to use WindowShades (roll-up) over minimization. Minimizing a window to a dock or taskbar always felt like "out of sight, out of mind," whereas a rolled-up title bar keeps the context present without the clutter. This feels like a great setup for someone who wants Debian’s stability without the "helpful" UI noise of 2026.
by mkehrt | 2026-01-09 18:30:57+00:00
Fun fact: cosine similarity's first use in recommendation systems to recommend usenet groups.

(https://dl.acm.org/doi/epdf/10.1145/192844.192905 although they don't call it cosine similarity; they do compute a "correlation coefficient" between two people by adding together the products of scores each gave to a post)
by bjackman | 2026-01-09 18:31:14+00:00
This isn't just useful for high-level application logic! (If I'm catching your drift from "the compiler writes the state machines for you).

I used to write extremely low-lebel NIC firmware that was basically a big bundle of state machines. Rust wasn't ready back then but I was desperate for something like coroutines/async. I think it would have been incredibly valuable.

(There are tricks to do coroutines in C but I think they're too hacky. Also, back then we believed that RTOS threads with their own stack were too expensive, in retrospect I'm not sure we ever entirely proved that).

I may be naïve in this case but I think it would also have been super useful for the high level protocol stuff. Like: 802.11 association flows. If we could have just spun up a Tokio task for each peer, I feel the code would have been an order of magnitude smaller and simpler.
by barbazoo | 2026-01-09 18:31:33+00:00
Quick collapse, slow collapse, the results will be vastly different, I think, with other parties taking advantage of the chaos whichever degree it will be.

Our timeline is moving on with or without the US. Electrification is going to happen, the US will just slow down how fast the number will go up. The world isn't reliant on US innovation anymore I imagine so it'll go up regardless.
by kypro | 2026-01-09 18:31:49+00:00
> In this political climate, Cloudflare siding with the current administration's general line of "we're Americans, our economy is strong so we're above international law" sends a message I don't think they fully understand.

This isn't international law though. It's an authoritarian move by the Italian government. "Technically" and "legally", you're correct that Cloudflare is wrong for not building infrastructure to help Italy censor the web from Italians, but sometimes you should break the law if you disagree with it strongly enough.

Please don't take this the wrong way, but I find it interesting that no where in your comment did you try to justify the behaviour other than to say "it's the law". But that is the problem. Why is it the law? Do you think the law is justified?

> My take is that when Italian customers notice their ping going up by 10x because all their traffic is now routed through France, they will switch to BunnyCDN, Fastly or any of the dozens of CDNs that do have servers in Italy.

Completely agree with you there. Seems like a pretty stupid move to be honest. If I were CEO of Cloudflare I'd probably just shut my mouth and censor the internet.
by chrismorgan | 2026-01-09 18:32:18+00:00
A lot of the stuff WebAssembly is obviously good at is stuff where you never need any of those tables—algorithms, computations, not UI stuff. I would like to see improvements like you to make it more generally useful, but there’s still plenty of scope for WASM even without running into these issues. Also I think you’re probably overestimating the size of the stuff you actually need to include. You tend to include specific tables rather than all the data. More typical figures are like “oh, you used regex with its default features… that’ll cost 500 kB”. And that’ll also be a pre-compression 500 kB. Though on the other hand you can also end up including multiple copies of things when you’re careful about optimising what each one has!
by entropicdrifter | 2026-01-09 18:32:32+00:00
It's more that FSync was close to but subtly different from the Windows synchronization primitives when used in certain specific ways and NTSync is a 100% accurate implementation of those same exact Windows synchronization primitives. It should resolve hitching and other minor issues in older games, especially.

Basically it will have no performance improvement, in some cases minor degradation, but it resolves some compatibility issues with older multi-threaded programs.
by derrida | 2026-01-09 18:32:34+00:00
As someone that like to play piano and guitar - I could see this immediately as something to improve my skills and playing by ear

For me I was thinking a thought I almost never think and is long forgotten "where is that old home button in my browser so I can set this as my homepage, or maybe I have to solve 2-3 of these before I can log in to my computer" xD

"insubstantive" is a nice word - software that is modifiable by the user at run time - I guess like scripting "it's just throw away" or emacs bit of elisp and keyboard macro and move on "insubstantive"

Embrace the insubstantive! Otherwise - enjoy when you have a "problem" sitting down and having to abstract more and find the general and solve for "N" because the time investment was high and the tools did not allow for this sort of sketching, insubstantive, throwaway type thing.