MurphyA/hacker-news huggingface dataset:
by subscribed | 2026-01-22 00:21:12+00:00
Play Integrity certifies (and banks/etc approve) that Android 8.0 (oreo) unpatched for several years, full of vulnerabilities for RCE, 0-click, privilege escalation, etc, so full of holes it's trivial to get a root and then hide it (or use leaked cert), is absolutely a-ok, safe to use and secure for user.

Yes?

Is this what you're suggesting? :)

Because this is what's certified and embraced.
by MarsIronPI | 2026-01-22 00:21:20+00:00
I'm planning to set up something similar (but for compiling code). The difference is that my systems came without storage, so I intend to netboot them, which adds a whole other level of complication. I'm planning to use NixOS, with something like nixos-netboot-serve[0].

https://github.com/DeterminateSystems/nix-netboot-serve
by boston_clone | 2026-01-22 00:21:24+00:00
There are some neat detection bypass / compromise methods using various image formats, including PNG [0] and SVG [1]!

I imagine that folks like journalists could have that type of attack in their threat model, and EFF already do a lot of great stuff in this space :)

0. https://isc.sans.edu/diary/31998

1. https://www.cloudflare.com/cloudforce-one/research/svgs-the-...
by jtbulluw | 2026-01-22 00:21:28+00:00
Want to learn how I approach a day to day task as an engineer who likes to leverage AI tools like Jetbrain's AI Assistant & Junie Pro? Check out my latest blog post where I walk you through a normal day as an engineer in this post AI world. I also include information about the overall costs that you may expect to pay as an organization that is leveraging the latest and greatest in AI models and tooling and give you a breakdown on my opinions and how you can get the best bang for your buck. Enjoy!
by duskwuff | 2026-01-22 00:22:01+00:00
That doesn't really work in situations where the industrial base doesn't exist for local manufacturing, and where building that would be likely to take much longer than the tariff will be in place (to say nothing of the costs).

The example I used in a sibling reply - LCD manufacturing - is a perfect example. Existing companies can't simply start producing those on a moment's notice - building the necessary facilities would take years, and would likely require a $1B+ investment. It's extremely hard to justify that when it's likely that the tariff situation would change before production even started, let alone before the costs were recovered.
by mikestew | 2026-01-22 00:22:15+00:00
I just don’t get hesitation to get vaccinated among older people. I know it happens, but I’ve never known anyone to suffer ill effects from a vaccine. I’m old enough, however, to have known multiple people suffering life-long effects from diseases that could have been prevented by vaccines, had they existed. From being deaf in one ear, to crippled by polio, that shit should stick with you. All of the age groups in TFA are as old or older than I am, they should know better.
by ragle | 2026-01-22 00:22:37+00:00
I hate it, but I'm actually counting on this and how it affects my future earning potential as part of my early(ish) retirement plan!

I do use them, and I also still do some personal projects and such by hand to stay sharp.

Just: they can't mint any more "pre-AI" computer scientists.

A few outliers might get it and bang their head on problems the old way (which is what, IMO, yields the problem-solving skills that actually matter) but between:

* Not being able to mint any more "pre-AI" junior hires

And, even if we could:

* Great migration / Covid era overhiring and the corrective layoffs -> hiring freezes and few open junior reqs

* Either AI or executives' misunderstandings of it and/or use of it as cover for "optimization" - combined with the Nth wave of offshoring we're in at the moment -> US hiring freezes and few open junior reqs

* Jobs and tasks junior hires used to cut their teeth on to learn systems, processes, etc. being automated by AI / RPA -> "don't need junior engineers"

The upstream "junior" source for talent our industry needs has been crippled both quantitatively and qualitatively.

We're a few years away from a _massive_ talent crunch IMO. My bank account can't wait!

Yes, yes. It's analogous to our wizzardly greybeard ancestors prophesying that youngsters' inability to write ASM and compile it in their heads would bring end of days, or insert your similar story from the 90s or 2000s here (or printing press, or whatever).

Order of "dumbing down" effect in a space that one way or another always eventually demands the sort of functional intelligence that only rigorous, hard work on hard problems can yield feels completely different, though?

Just my $0.02, I could be wrong.
by binarysolo | 2026-01-22 00:23:12+00:00
My fees are high but my COGS are low -- they're typically <30%, but our typical unit pricing is <$30 so the FBA fees and base fees/unit sold hit hard.

We make ~30% before labor and net 10-20% after everything so it works OK. Most bigger sellers I know live in the 10-30% net range.

Our Walmart store is pretty sad, cross product lines we sell between 1-10% of our rev on Amazon :( ... but that's also because our products (home and kitchen) have lower cost competitors on Walmart itself. We're the mid-premium product, which is a much better position on Amazon and the right marketplace fit.
by mike_d | 2026-01-22 00:23:51+00:00
Shameless self promotion: preview.ninja is a site I built that does this and supports 300+ file formats. I'm currently weekend coding version 2.0 which will support 500+ formats and allow direct data extraction in addition to safe viewing.

It is a passion project and will always be free because commercial CDR[1] solutions are insanely expensive and everyone should have access to the tools to compute securely.

1. https://en.wikipedia.org/wiki/Content_Disarm_%26_Reconstruct...
by coppsilgold | 2026-01-22 00:24:15+00:00
While useful it needs a big red warning to potential leakers. If they were personally served documents (such as via email, while logged in, etc) there really isn't much that can be done to ascertain the safety of leaking it. It's not even safe if there are two or more leakers and they "compare notes" to try and "clean" something for release.

https://en.wikipedia.org/wiki/Traitor_tracing#Watermarking

https://arxiv.org/abs/1111.3597

The watermark can even be contained in the wording itself (multiple versions of sentences, word choice etc stores the entropy). The only moderately safe thing to leak would be a pure text full paraphrasing of the material. But that wouldn't inspire much trust as a source.
by staticassertion | 2026-01-22 00:24:22+00:00
You're making a lot of assertions here that are really easy to dismiss.

> It tells us that (large-scale) existence is a requirement to have morality.

That seems to rule out moral realism.

> That implies that the highest good are those decisions that improve the long-term survival odds of a) humanity, and b) the biosphere.

Woah, that's quite a jump. Why?

> So yes, I think you can derive an ought from an is. But this belief is of my own invention and to my knowledge, novel. Happy to find out someone else believes this.

Deriving an ought from an is is very easy. "A good bridge is one that does not collapse. If you want to build a good bridge, you ought to build one that does not collapse". This is easy because I've smuggled in a condition, which I think is fine, but it's important to note that that's what you've done (and others have too, I'm blanking on the name of the last person I saw do this).
by ropable | 2026-01-22 00:24:26+00:00
Everyone here throwing shade at Stack Overflow is clearly too young to remember the horror of Experts Exchange and every other technical help site prior to SO. For nearly a decade, it was absolutely transformative as a technical help resource. It certainly had its faults, but it was so far ahead of the other options as to be game-changing.

I believe that the main reason for SO's decline starting around 2018 was that most of the core technical questions had been answered. There was an enormous existing corpus of accepted answers around fundamental topics, and technology just doesn't change fast enough to sustain the site. Then the LLMs digested the site's (beautifully machine-readable) corpus along with the rest of the internet and now the AIs can give users that info directly, resulting in a downward spiral of traffic to SO, fewer new questions, etc.

Vale, Stack Overflow. You helped me solve many tricky problems.
by seizethecheese | 2026-01-22 00:24:36+00:00
It could be D) messaging for current and future employees. Many people working in the field believe strongly in the importance of AI ethics, and being the frontrunner is a competitive advantage.

Also, E) they really believe in this. I recall a prominent Stalin biographer saying the most surprising thing about him, and other party functionaries, is they really did believe in communism, rather than it being a cynical ploy.
by IgorPartola | 2026-01-22 00:24:42+00:00
Only people who have not seen the world believe humans are the same everywhere. We are in fact quite diverse. Hammurabi would have thought that a castless system is unethical and immoral. Ancient Greeks thought that platonic relationships were moral (look up the original meaning of this if you are unaware). Egyptians worshiped the Pharaoh as a god and thought it was immoral not to. Korea had a 3500 year history of slavery and it was considered moral. Which universal morality are you speaking of?

Also what in the Uno Reverse is this argument that absence of facts or evidence of any sort is evidence that evidence and facts could exist? You are free to present a repeatable scientific experiment proving that universal morality exists any time you’d like. We will wait.
by josevalencar | 2026-01-22 00:25:35+00:00
Hey HN

I just built an app for a problem I have: newsletter overload. I subscribe to 15+ newsletters but only read 2-3, never at the right time, and most content isn't relevant to me.

So I built Upletter (https://upletter.app), you describe what you want to read about, set your preferred tone/style, choose when to receive it (e.g., "Tuesday & Thursday, 9 AM"), and AI generates a personalized newsletter just for you.

Current state: Extremely early MVP. You can create one newsletter with custom settings. That's it. I'm validating whether this is something people would actually want before building out the full system.

Questions I have:

1. Would you use something like this?
2. What's missing or wrong with the concept?
3. How is this better/worse than just asking ChatGPT daily?
4. What would make you actually pay for this?

I know it's rough, but I'd love honest feedback before I invest more time building the wrong thing. Roast it, please!
by nandomrumber | 2026-01-22 00:26:10+00:00
Prove it.

Show us the data.

What is the price of desalinated water vs water that literally falls from the sky.

They both need to be chlorinated and piped to the end user, but desalinated water is typically at the wrong end of existing delivery infrastructure to take advantage of it.

And irrigators often have things like God deliver much of their water via rain, rivers etc.

So it stands to reason that desalinated water must be much more expensive.

Did reverse osmosis suddenly become energetically inexpensive while I wasn’t paying attention?

Did we build a bunch of nuclear power plants by the coast to use the waste heat for flash distillation?

Did brine disposal suddenly become a trivial issue to solve?
by nayuki | 2026-01-22 00:26:20+00:00
> he was able to work it out in his head, and pretty quickly

That's a scary ability. I wonder if that guy is equally adept at converting acre-feet to gallons, or if he's a one-trick pony.

Here's what I know without looking anything up: 1 mile = 1760 yards, 1 yard = 3 feet, 1 foot = 12 inches; 1 US gallon = 231 cubic inches (exact conversion, and a weird number at that). So 1 cubic mile = (63360 inch)^3 = 7707820032000/7 gal ≈ 1.101 trillion US gallons.

Fun fact, combustion engine displacements used to be quoted in cubic inches. Note that 61 in^3 ≈ 1 litre.
by Nextgrid | 2026-01-22 00:26:30+00:00
All these companies have the exact same business model as Google (advertising) and have the same mismatched incentives: good search results are not something they want.

Google Search sucks not because Google is incapable of filtering out spam and SEO slop (though they very much love that people believe they can't), but that spam/slop makes the ads on the SERP page more enticing, and some of the spam itself includes Google Ads/analytics and benefits them there too.

There is no incentive for these companies to build a good search engine by themselves to begin with, let alone provide data to allow others to build one.
by alt187 | 2026-01-22 00:26:47+00:00
It's more complex than that. The three pillars of learning are theory (finding out about the thing), practice (doing the thing) and metacognition (being right, or more importantly, wrong. And correcting yourself.). Each of those steps reinforce neural pathways. They're all essential in some form or another.

Literacy, books, saving your knowledge somewhere else removes the burden of remembering everything in your head. But they don't come into effect into any of those processes. So it's an immensely bad metaphor. A more apt one is the GPS, that only leaves you with practice.

That's where LLMs come in, and obliterate every single one of those pillars on any mental skill. You never have to learn a thing deeply, because it's doing the knowing for you. You never have to practice, because the LLM does all the writing for you. And of course, when it's wrong, you're not wrong. So nothing you learn.

There are ways to exploit LLMs to make your brain grow, instead of shrink. You could make them into personalized teachers, catering to each student at their own rhythm. Make them give you problems, instead of ready-made solutions. Only employ them for tasks you already know how to make perfectly. Don't depend on them.

But this isn't the future OpenAI or Anthropic are gonna gift us. Not today, and not in a hundred years, because it's always gonna be more profitable to run a sycophant.

If we want LLMs to be the "better" instead of the "worse", we'll have to fight for it.
by staticassertion | 2026-01-22 00:26:57+00:00
I can think of multiple cases.

1. Adversarial models. For example, you might want a model that generates "bad" scenarios to validate that your other model rejects them. The first model obviously can't be morally constrained.

2. Models used in an "offensive" way that is "good". I write exploits (often classified as weapons by LLMs) so that I can prove security issues so that I can fix them properly. It's already quite a pain in the ass to use LLMs that are censored for this, but I'm a good guy.
by al_borland | 2026-01-22 00:27:18+00:00
I’ve paid for a few things for work, but I’m always living a bit outside of corporate rules when I do that. This makes it hard for me to justify if it’s only for work. In other cases, the licensing of the product doesn’t allow me to bring my personal license to work.

I’ve paid for 2 text editors, that I used personally, but also took it to work. Now I use VS Code, because the company essentially mandated it with the way they rolled out GitHub Copilot and wanted to see metrics on it. This pushed me to VSCodium at home, so I don’t have to live 2 different worlds.

I paid for the font I use in my editor, I assume that’s not something that will get flagged.

Transmit (from Panic) and Kagi are the other two things I’m using at work with my personal account. I keep waiting for them to randomly stop working one day.

Getting an actual license for software through work, that isn’t already approved, requires so much bureaucracy and red tape; I don’t even know where to begin.

I sometimes daydream about working for myself or a small company, where I can use whatever I want.
by LarsKrimi | 2026-01-22 00:27:27+00:00
I liked the core challenge. Finding the balance of ALU and VALU, but I think that the problem with the load bandwidth could lead to problems

Like optimizing for people who assume the start indices always will be zero. I am close to 100% sure that's required to get below 2096 total loads but it's just not fun

If it however had some kind of dynamic vector lane rotate that could have been way more interesting
by rcoder | 2026-01-22 00:27:35+00:00
Likewise interested in the authoritative answer, but: if I needed to write a decent chunk of code that had to run as close to wire/CPU limits as possible and run across popular mobile and desktop platforms I would 100% reach for Rust.

Go has a lot of strengths, but embedding performance-critical code as a shared library in a mobile app isn't among them.
by georgemcbay | 2026-01-22 00:28:07+00:00
> In the near future there will be no developers needed at all for the majority of apps.

Software CEOs think about this and rub their hands together thinking about all the labor costs they will save creating apps, without thinking one step further and realizing that once you don't need developers to build the majority of apps your would-be customers also don't need the majority of apps at all.

They can have an LLM build their own customized app (if they need to do something repeatedly, or just have the LLM one-off everything if not).

Or use the free app that someone else built with an LLM as most app categories race to the moatless bottom.
by vpribish | 2026-01-22 00:28:37+00:00
I liked "The White Album" even more! Beyond those two I can't universally recommend.

I read those around the same time as I re-read Neuromancer (written only 15 years later) -- i found a similar descriptive style and sense of detachment from their characters set in deeply changing worlds. might have just been my mood.

Then there's Fear and Loathing - same time and place as Didion and also an author whose personality is as important as the writing. quite a different vibe, though
by aquariusDue | 2026-01-22 00:28:52+00:00
Same here, I've slept these past few years on Flutter even when someone recommended trying it out and was pretty enthused about it. Last month I got roped in a greenfield project and allowed to chose the stack, instead of the tried and true React Native I went for Flutter and I'm glad I did so.

Also shout-out to flutter_rust_bridge and a video[0] on YouTube from a conference explaining how to fit it in, I get to use Flutter and Dart for the UI parts and everything else in Rust. Another great thing because of Flutter's hot-reload I get to avoid the sucky parts of waiting for Rust code to compile to see UI changes. I've also had good (not great) success getting Gemini 3 Pro to sketch out the initial UI and the boilerplate and that also allowed me to move a bit faster than I would've otherwise.

[0] https://youtu.be/yZ0XHRfU7Ao?si=JQXHS61ycxVSq9GF
by MomsAVoxell | 2026-01-22 00:29:09+00:00
You can already use git with REAPER right now, plain and simple.

REAPER’s project files are all very git friendly.

Simple add/commit/push, etc. Of course, if you’re going to be sharing a REAPER project in a repo, you should enable LFS, and have a smart project structure for your works. If collaboration through a repo, with tagging and branching, is part of your setups workflow, this already works quite well with REAPER projects.

However, I have to say that since REAPER allows full control over literally years of recording sessions, the whole concept of having the ability to go back and forth through different versions of the art—form being recorded (music, vocals, etc.) is already well provided in REAPERS sample-accurate ‘reflog’.

;)
by alphazard | 2026-01-22 00:29:10+00:00
I seem to remember Yahoo finance (I think it was them, maybe someone else) introducing benign errors into their market data feeds, to prevent scraping.
This lead to people doing 3 requests instead of just 1, to correct the errors, which was very expensive for them, so they turned it off.

I don't think watermarking is a winning game for the watermarker, with enough copies any errors can be cancelled.
by chaps | 2026-01-22 00:29:26+00:00
Heh, I've seen this a bunch of times and it's of interest to me, but honestly? It's sooooo limiting by being an interface without a complementary command line tool. Like, I'd like to put this into some workflows but it doesn't really make sense to without using something like pyautogui. But maybe I'm missing something hidden in the documentation.
by CyberDildonics | 2026-01-22 00:29:39+00:00
This is about research and experimentation.

Haskell is 36 years old. It isn't research and experimentation any more, it is ideas that everyone with experience has had a look at. Some people might be learning haskell for the first time, but that doesn't mean it's still research, that all happened decades ago.

The good idea surrounding this isn't about treating functions as data, but maintaining the purity of the type system allowing the implications of the type system to run their course.

And what are the benefits here? How do they help the things I talked about? How do they avoid the pitfalls?

Also, claiming that the lack of an argument is evidence to the contrary is argument from silence, a logical fallacy.

Not really, because if you could contradict what I've said you would have.

within the framework of type theory and functional programming.

People can gather in a room and tell each other how great they are and how they have all the answers, but in 36 years there is a single email filtering program that was made with haskell.

you're using reasoning that applies only to procedural programming to attempt to prove why an idea in functional programming is bad.

I explained why this is a bad idea from fundamental and universally agreed upon ideas about the best ways to write software.

Functional programing languages had lots of ideas and features that turned out to work well. That doesn't mean that conflating two completely separate concepts is a good idea, no matter what 'type theory' someone comes up with to support it.

Saying something is good because haskell says it is good is circular religious thinking. These two things aren't the same, they are literally two different things and trying to unify them doesn't make life easier for anyone. It's just programming cleverness, like the 'goes to operator --> '
by ralivi | 2026-01-22 00:30:03+00:00
I run a small SEO agency (25ish clients) and our "CRM" was a Google Sheet we kept forgetting to update. Leads went cold because nobody remembered to check if we'd heard back.
Built Ralivi to fix it. It connects to Gmail/Outlook, watches your conversations, and each morning gives you a list: "These 4 people haven't replied in 3+ days. This quote was sent last week with no response. This lead replied yesterday and you haven't opened it."
No AI writing your emails. No automated sequences. Just a list of who needs attention today.
Pricing is $49/mo for one user, drops to $20/user if you add your team. 14-day trial, no card required.
Been using it ourselves for the last few months and it's caught a few deals I definitely would have lost. Happy to answer questions about the build or the approach.
by Nextgrid | 2026-01-22 00:30:13+00:00
There is a logistics problem here - even if you had enough money to pay, how would you get in touch with every single site to even let them know you're happy to pay? It's not like site operators routinely scan their error logs to see your failed crawling attempts and your offer in the user-agent.

Even if they see it, it's a classic chicken & egg problem: it's not worth the time of the site operator to engage with your offer until your search engine popular enough to matter, but your search engine will never become popular enough to matter if it doesn't have a critical mass of sites to begin with.