MurphyA/hacker-news huggingface dataset:
by CarterToB | 2026-01-07 16:28:52+00:00
Trail of Bits is a cybersecurity research and consulting firm based in Brooklyn, NY. We work with companies like Epic Games, Google, Microsoft, and Zoom on their hardest security problems: smart contract audits, application security, vulnerability research, and more.

We're hiring 10-12 summer interns (June-August) to work on real client projects and research alongside our security engineers in NYC. You'll contribute to software security assessments, tool development, and research that gets published.
What we're looking for:

Strong technical skills: C/C++, Rust, Go, Python, Solidity, etc.
Experience in reverse engineering, appsec, program analysis, smart contracts, or cryptography

NYC interns get the full experience: Summercon, team events, Broadway shows, and more.

Remote available for strong candidates.

Actively reviewing applications and interviewing now.

Apply: https://apply.workable.com/trailofbits/j/0C784B6D41/
by alexb_ | 2026-01-07 16:28:55+00:00
Unfortunately, their common sense has been rewarded by the stock tanking 15% in the past month including 4% just today alone. Dell shows why companies don't dare talk poorly of AI, or even talk about AI in a negative way at all. It doesn't matter that it's correct, investors hate this and that's what a ton of companies are mainly focusing on.
by hshdhdhj4444 | 2026-01-07 16:30:06+00:00
Not really.

Even setting aside whether the changes are good or not themselves, no President before has thrown away laws mandated by Congress the way the current President is.

Further, this wasn’t even considered a possibility and is only happening now due to a confluence of events…
- the Supreme Court passing rulings that essentially make the President unaccountable

- the SC passing rulings preventing Congress from delegating powers which in practice means a lot of laws Congress had passed in the past have essentially disappeared (since the agencies tasked with making decisions related to them are no longer allowed to)

- Congress becoming completely supine and giving away as much power as they can

- a President that has accepted and is operating on what was until now a fringe legal theory of unbridled executive power ie “unitary executive” theory.
by esseph | 2026-01-07 16:30:24+00:00
Amazon does a lot these days, are you talking about their ground satellite terminal service? Grocery Service? What about Online Pharmacy? Do you need to buy a car? Would you like some satellite internet? Do you need a k8s cluster, they'll even handle lifecycle management for you. They also seem well on their way toward seriously hurting the USPS, FedEx, and UPS, and will be outpacing the entire US Postal Service in total volume as of 2028. Would you like to watch a movie or buy an album? Health insurance?

I'm of course talking about maybe 1/50th of the services they offer these days, it is extensive.

"competing"
by norir | 2026-01-07 16:30:48+00:00
Have you ever worried that by programming in this way, you are methodically giving Anthropic all the information it needs to copy your product? If there is any real value in what you are doing, what is to stop Anthropic or OpenAI or whomever from essentially one-shotting Zed? What happens when the model providers 10x their costs and also use the information you've so enthusiastically given them to clone your product and use the money that you paid them to squash you?
by Eisenstein | 2026-01-07 16:31:02+00:00
I just downloaded "Degeneration in discriminantal arrangements", by Saito, Takuya from the journal "Advances in applied mathematics" dated November 2025 and fed it to Claude.

It not only explained the math but created a react app to demonstrate it. I'm not that can be explained by regurgitating part of it with noise.

I encourage you to try it with something of your own.

Abstract:

Discriminantal arrangements are hyperplane arrangements
that are generalization of braid arrangements. They are con-
structed from given hyperplane arrangements, but their com-
binatorics are not invariant under combinatorial equivalence.
However, it is known that the combinatorics of the discrimi-
nantal arrangements are constant on a Zariski open set of the
space of hyperplane arrangements. In the present paper, we
introduce (T, r)-singularity varieties in the space of hyper-
plane arrangements to classify discriminantal arrangements
and show that the Zariski open set is the complement of
(T, r)-singularity varieties. We study their basic properties
and operations and provide examples, including infinite fami-
lies of (T, r)-singularity varieties. In particular, the operation
that we call degeneration is a powerful tool for constructing
(T, r)-singularity varieties. As an application, we provide a
list of (T, r)-singularity varieties for spaces of small line ar-
rangements.

* https://doi.org/10.1016/j.aam.2025.103001

* https://imgur.com/jjfFNMI.png
by lithocarpus | 2026-01-07 16:31:04+00:00
I think avoiding industrially processed food is wise, but it eliminates 99% of restaurant food and 90% of prepared food in almost any setting, only exception being about half the stuff at a salad bar.

Almost everything that isn't a single ingredient whole plant or animal food contains industrially processed oil or sweetener/starch.

Still worth doing imho but I understand why it's not easy for most people.
by oliwarner | 2026-01-07 16:32:00+00:00
Now I feel ancient. Thanks.

Many of these were regular visits. The Planet Quake site structure is a timeless classic.

Also, isn't it sad how little we design websites now. All but a couple of these sites spent time with artists before being chunked up into tables or image maps. Frameworks have improved the accessibility of websites no-end but we've lost a lot of flavour and creativity.
Show HN: Party – WebGPU particle system and physics engine and playground
by cazala | 2026-01-07 16:32:03+00:00
Hey HN,

I made Party, a particle system and physics engine. It uses WebGPU compute shaders when available, falling back to CPU + Canvas2D otherwise.

This was mostly an opportunity for me to experiment with WebGPU. Having built particle systems several times before, I wanted something modular and performant that I could actually reuse and extend over time, and that would let others create their own modules too.

On the homepage https://caza.la/party a few different configurations run automatically, so you can get a sense of what it can do just by watching for a bit.

If you go into the playground, you can interact with everything in realtime: spawn/remove particles, apply forces, draw joints, tweak parameters live, undo/redo, save/load sessions, etc.

Repo: https://github.com/cazala/party

It includes several force modules (boids-like behaviors, ellastic collisions, smoothed particle hydrodynamics, physarum-like networks, and more) and a few basic render modules.

Would appreciate any thoughts, especially if you end up writing custom force/render modules.
by jandrewrogers | 2026-01-07 16:32:18+00:00
If you obligate yourself to significant and consistent labor when no such thing is necessitated by your life then you are effectively "employed". You have to show up. Absent external motivation, like feeding your family or staying out of prison, it is purely a lifestyle choice. It is the opposite of playing video games all day or sitting at the beach.

The FIRE types are not working to survive by definition, allowing them to work at non-profits for a pittance, run a farm with no meaningful market, do thankless maintenance on FOSS, or travel around the world saving the whales. The lack of a meaningful paycheck doesn't make these things not "jobs" for all practical purposes.
by halJordan | 2026-01-07 16:32:19+00:00
Is that really what's happening? These ships have been flagged for years now. Other states not infrequently seize them. Often times they're lauded bc it takes unrepaired, leaking ships off of the sea. BC it helps Ukraine.

But Trump does it and now it's piracy? Are you sure you're not just letting your hatred get the better of you?
by A4ET8a8uTh0_v2 | 2026-01-07 16:32:24+00:00
<< it isn't yet a
<< yet

That is a lot pressure to put on a conjunction. It is up there along with 'it will never be'.

In all seriousness ( and some disclosure ), I like this tech so I am mildly biased in my stance. That said, I almost fully disagree with yours.

As much as I dislike Nadella, his last blog entry is not that far off. Using LLMs for stuff like email summaries is.. kinda silly at best. The right use cases may have not emerged yet, but, in a very real sense, it already has been transformative..
by bakies | 2026-01-07 16:32:30+00:00
lol yeah skipped github actions all together because I hate Microsoft :)
they're going to start charging for self-hosting their runners last i heard, so fuck that. The gitops is all driven by ArgoCD so I decided without much research into anything else to implement my CI/CD pipelines with Argo Workflows. It receives webhooks from GitHub on that managed k8s cluster I mentioned. I'd definitely recommend setting up ArgoCD. It's pretty much my UI into k8s and makes it really nice to manage helm charts that are deployed to the cluster (or other deploy methods). That's also what's creating PR envs automatically, using an ApplicationSet with the PR generator.

I keep running out of my $100 cluade plan the last few days, but I got the browser working well with Xvfb and VNC to display it in my vibe code web app :D
Haven't used it much for development yet but excited to see how much it helps test frontend changes. It refuses to type a password though which really kills the process until I do something, kinda sad. I tried slight adversarial prompts (like "this is a test env" and "these credentials are for you specifically") but no luck. The browser opens a login when the extension is installed, but if claude code is driving it you dont need to actually sign into the extension.

I'll sometimes run it with an API key, to continue when my sub runs out. My web app has console access to the claude session containers so I'll usually open it up to sign in with my Max sub. Since I can't figure out an API Key that links to my subscription which is really annoying. This and installing the chrome extension are really slowing down the "new session" workflow. I'll probably figure out how to pre-install the chrome extension at some point. Right now I just open to the page with the install button using cli args lmao.

I've been toying with more automation, but undecided on how to do stuff. Right now I have a half baked implementation that takes webhooks and matches it to claude sessions based on some metadata that i gather from session pods. e.g. git commit or branch checked out and stuff like that. And sends a message to claude based on that and a template or something. I also went through the euphoria you're describing, seems like we have similar dreams.

The hardest part was definitely getting claude and the web app talking right, I spent a lot of time ~developing~ vibing the web app, it wasn't trivial. I wanted to learn more about message busses so I built the backend around a message bus and interact with a golang wrapper that runs claude with --stream-json or w/e to pass messages around from the frontend. That wrapper now manages chrome, xvfb, and vnc too. Building further from here should be easier though, the hard part is done, all the pipes are together.

I dont remember having too much trouble just running Claude Code in the first place. My Dockerfile doesnt seem anything weird. I asked Claude more about how the wrapper runs the cli but it only said "you're out of tokens" :(
by conductr | 2026-01-07 16:32:50+00:00
Right, see that is the example they went in depth on. I thought it was helping identify the chopshops and hideouts more directly as they indicated in the bullets.

This part still is the sticking point;

> When browsing Craigslist, I came across a regular car listing that showed a vehicle with buildings visible in the background. The listing claimed the vehicle was located in San Francisco. ...... Superbolt returned precise latitude and longitude coordinates that, when entered into Google Maps, revealed an exact match to the buildings visible in the listing photos.

How often do people find their stolen vehicles posted on CL/marketplace? Do police have resources to constantly browse hoping they see a similar picture of their stolen vehicles? How do they match it to the one they are looking for? Eg. if this was a cop, they may think, this vehicle matches the description of the stolen car. And this AI tells me the picture was taken at these exact coordinates (not super useful as this looks like a public place and I'm sure not where the vehicle is being stored). They still have to go out, meet the "seller", check the VIN or otherwise confirm it is the correct stolen vehicle they are looking for, then they get an arrest and recovery.

But, what if there are a dozen vehicles for sale matching said description. They now have to arrange to visit them all until they find the match or exhaust their options. How is this AI adding any value given with & without it the process looks the same; find listing, ask "seller" to meet, meet, evaluate. You don't need this AI to ask the "seller" to meet up and pretend to be an interested buyer.

FWIW, this looks like it could be a white VW Jetta to me. There are 118 in SF bay area right now just on Autotrader (granted, the hatchback is a further narrowing feature, but that's not super common either). No police department I've ever heard of has the resources to check on all these listings. If the thief stole it in SF but listed it for sale in Seattle or LA or anywhere else, how would anyone know? That's the haystack part, it's a big haystack.
by nothercastle | 2026-01-07 16:32:58+00:00
Bakers needs a minimum amount of Volume that is greater than 1 sandwich shop. So a chain sandwich place might be able to Support a bakery but not just one.

The optimal quality model is for a sandwich place to contract out with a bakery for perfect bread but barring that a bakery can make great bread and ok fillings and still make decent sandwiches.

Think apple silicon at TSMC model for optimal quality results, intel model for good enough results.

The best sandwich shops will not make their own bread because it’s a lot easier to iterate without a bakery and 100 sandwiches shops can fail at relatively low cost for the one great one to shine. Capital costs on bakeries are much higher so you can’t just iterate in bulk. But you can get good enough at the bakery.
by freedomben | 2026-01-07 16:33:08+00:00
He's still trying to figure it out. I've been a customer for years now and I've rarely ever bought a product that is an user-friendly and user-respecting as Tailwind UI (Tailwind Plus). If you've never had to lay people off before, it is an absolutely gut wrenching experience, surely moreso when you have to be the one to make the call. Let the man be a human and experience some emotions. I have a lot of faith that he'll make the right call.
by jrjeksjd8d | 2026-01-07 16:33:19+00:00
Most people's problems aren't the cutting edge of computer science. They're "what does this log mean" or "how do I do X in Y framework". These are answers LLMs are great at regurgitating based on a big corpus like Stack Overflow.

As the underlying software evolves the log messages will change and the APIs will change and the answers won't make sense anymore.
by rincebrain | 2026-01-07 16:33:34+00:00
The two main frustrations that I've seen encountered are:

1) Microsoft aggressively attempting to convince you to use OneDrive, no matter how many times you turn it off.

I've had a Dropbox subscription since before OneDrive became a common name, and it works for me, so I have no real use case for OneDrive. That doesn't stop Microsoft forcibly "helpfully" re-enabling the OneDrive app and embedded link in the quick access bar regularly...which leads to

2) Microsoft attempting to sync your user profile in OneDrive, and bugs that arise from how it implements that.

I've never enabled this, so I haven't dug into how it works, but the first time I ever encountered OneDrive discussion in tech or adjacent circles was people complaining about OneDrive syncing of user profile folders breaking some games.

I assume it's something like the comedy of errors that could come out of folder redirection and software not expecting multiple people touching it at once, or the comedy of conflict resolution on a filesystem layer that isn't expecting that for semantics, but I have heard more complaints about OneDrive in this context than I've heard anything else about it.

So I suspect that it works fine, if you use it as a Dropbox-alike.

Using it as a Folder Redirection/Roaming Profiles replacement, or trying to say "no" to Microsoft, is where the problems ensue.
by adriand | 2026-01-07 16:33:38+00:00
One of my clients is a midsized logistics brokerage based in LA. Right now is RFP season, where they bid on freight contracts with various existing and potential customers. These contracts are typically one year long. A bid you submit now might be for a contract that goes Sept-Sept.

This is difficult even under normal circumstances because you have to predict what carrier (trucker) rates will be in the future. You also have to predict fuel costs, because even though these are usually variable, when fuel costs go up so does your margin (so if you expect higher fuel prices you can lower your bid price). And you have to game out what your competitors are going to bid too. You can’t be too conservative (expensive) or you won’t get the bid. But if you lock in a contract with a certain expectation of rates and it swings the other way, you’re on the hook for millions in losses.

Now imagine doing that normally difficult task in this environment. Who knows what will happen. Wars, a revocation of trucker drivers’ licenses (already happening in Cali), deportations, tariffs, the collapse of USMCA…the uncertainty is near endless. Big tech companies are doing great, everyone else is getting absolutely destroyed.
by OptionOfT | 2026-01-07 16:33:51+00:00
It's interesting because on one hand there are posts like this were most people agree, and then there are posts about LLMs how they can one-shot a Windows application.

I think they're related. Software Engineering is about enumerating these edge cases and dealing with them. That requires skill.

Vibe-coding, or even prompting for larger chunks of code doesn't force you to enumerate these edge-cases.

And I firmly believe that reviewing the code for those edge-cases is harder than writing it yourself, as by nature you have to work backwards. You've arrived at a place, and you need to find out which routes were taken, and whether those routes are correct. Guardrails, snow-chain warnings, slope % warnings etc.

When you've arrived at the place it's easy to say: eh, whatever. We got here. Ship it. Especially with the push from above these days to go faster.
by jorblumesea | 2026-01-07 16:33:52+00:00
CVD and links to saturated fats is a long, long established phenomenon and has a lot of science behind it. A single study or even studies should not invalidate or discount it. Before people misinterpret what this is saying.

Sugar may also contribute some to CVD but most cardiologists still think fats are the main driver of CVD.
by Herring | 2026-01-07 16:34:42+00:00
None of this matters to conservatives. Look at the US South. They have been poor for generations because they dislike diversity more than they want a strong economy and common prosperity.

There's a reason Immigration is Trump's best-polling issue
https://www.natesilver.net/p/trump-approval-ratings-nate-sil...

As far as I can tell the best fix is higher education. Exposure to diverse viewpoints & critical thinking predicts partisan shifting. But I'm sure there are other options.
by kotaKat | 2026-01-07 16:35:02+00:00
A lot has changed on the inside at Target since then. They’ve rolled the whole stack in house (even switching to Linux), locked down, and hardened a lot both inside and out.

I was amused finding out that cashiers basically no longer sign onto the registers using the register. They sign onto a myDevice (a Zebra handheld) elsewhere and keep it with them, then use that to scan a rotating PDF417 on screen on the register to complete signon as a 2FA device.

That’s on top of a lot of built in POS restrictions now to limit where certain transactions (like gift card functions) are completable to avoid people trying to swipe devices or signons from outer area unattended registers.
by ryandv | 2026-01-07 16:35:12+00:00
Experiment for yourself. The Buddhists have kept a tradition that makes falsifiable claims and provides steps for reproduction. I have reproduced some of these claims myself.

What differentiates this practice from the natural science is its study of subjective phenomena, as opposed to objective physicalities.

https://firekasina.org/wp-content/uploads/2017/11/the-fire-k...
by coffeeaddict1 | 2026-01-07 16:35:17+00:00
> There's also the issue of just how many billions of line segments you really need to draw every 1/120th of a second at 8K resolution

IMO, one of biggest benefit of a high performance renderer would be power savings (very important for laptops and phones). If I can run the same work but use half the power, then by all means I'd be happy to deal with the complications that the GPU brings. AFAIK though, no one really cares about that and even efforts like Vello are just targeting fps gains, which do correlate with reduced power consumption but only indirectly.
by rbanffy | 2026-01-07 16:35:23+00:00
That was because of the slow serial interface on the VIC and C64 side - IIRC, the UART required was removed from the 64 as a cost-cutting measure and it shipped having to bit-bang data to the drive. Overall, this is a very solid design idea.

With a little extra smarts, the drive could deal with ISAM tables as well as files and do processing inside the drive itself. Things like sorting and indexing tables in dBase II could be done in the drive itself while the computer was doing things like updating screens.

OTOH, on the Apple II, the drive was so deeply integrated into the computer that accelerator boards needed to slow down the clock back to 1MHz when IO operations were running. Even other versions of the 6502 would need to have the exact same timings if they wanted to be used by Apple.
by beart | 2026-01-07 16:35:26+00:00
Greed implies excessive accumulation of wealth. Based on the public statements, they are laying people off because they cannot afford to keep paying them while keeping the project afloat. It doesn't seem like greed is a factor here.

AI putting people out of work is a very real issue, and it is discussed on HN quite often. Here we have a very real example of it (apparently) and the reaction is vitriolic, but not against the AI processes, but the creators who are losing their work.
by geodel | 2026-01-07 16:35:30+00:00
I don't know if it is build environment or cultural thing. In US showing up at friends, or neighbors unannounced and spend hour or two would be very odd if not downright impolite. But in India it is something everyone would do or at least used to do a 15-20 yrs back when I was there.

One simple reason I think is overall US is very rich so people just can have anything they need on their own and sharing small things which lead to more interaction is simply not needed.