MurphyA/hacker-news huggingface dataset:
by b1temy | 2026-01-27 18:28:18+00:00
The link in the HN submission contains the same text and excerpt from your link.

Additionally they note: -

"While exploitability to remote code execution depends on platform and toolchain mitigations, the stack-based write primitive represents a severe risk."

IMO, probably in of itself, this alone is not able to do much besides maybe a crash / Denial of Service on modern systems. But it might be able to be used as part of a more advanced exploit chain, alongside other vulnerabilities, to potentially reach remote code execution, though this would be a much more sophisticated exploit and is maybe a bit of a reach. Still, I hesitate to call it impossible on modern systems due to the creativity of exploit developers.
by zahlman | 2026-01-27 18:28:58+00:00
I always have showdead on. I turned it on as soon as I learned that there was such a feature. Even the crypto scam posts amuse me.

I don't feel that I have a particular "style" of political analysis. In the case of ICE I'm not even doing political analysis; it's legal analysis.

I don't like seeing my communities swell with outrage that appears, to me, to be based on propaganda and ignorance. I would not be talking about these topics otherwise. And my defenses are not based in ideology, unless "the terms people are using here describe really serious terrible things, and shouldn't be abused" is an ideology.

I don't like being dissuaded from responding to it, because without any reassurance that it will be cleaned up as off-topic, that comes across to me as suppressing an opposed point of view. That especially galls on platforms that otherwise appear committed to open discussion of contentious topics.
by jchw | 2026-01-27 18:29:01+00:00
Essentially, the only reason to go over 60 Hz for desktop is for a better "feel" and for lower latency. Compositing latency is mainly centered around frames, so the most obvious and simplest way to lower that latency is to shorten how long a frame is, hence higher frame rates.

However, I do think that high refresh rates feel very nice to use even if they are not strictly necessary. I consider it a nice luxury.
by EngineerUSA | 2026-01-27 18:29:10+00:00
Amazon keeps shutting Restaurants, their retail stores, etc., but I for one am glad they are at least trying. I agree that the fiasco around the Indians running the show was a PR nightmare for their idea, but large companies running startup like ideas should be encouraged rather than disparaged (and I am no fan of Amazon just to be clear). I think this is one of those ideas where execution failed. If you are a busy worker, it is great to just head there and grab what you need, and walk out. Just faster all around.
by jimbokun | 2026-01-27 18:29:16+00:00
I'm pretty happy with Copilot in VS Code. Type what change I want Claude to make in the Copilot panel, and then use the VS Code in context diffs to accept or reject the proposed changes. While being able to make other small changes on my own.

So I think this tracks with Karpathy's defense of IDEs still being necessary ?

Has anyone found it practical to forgo IDEs almost entirely?
by lowercasename | 2026-01-27 18:29:17+00:00
This feedback has been really great and detailed, just what I was looking for!

- I've added an option in user settings to turn on a 'Skipped' stack.

- Card titles should now all be clickable!

- It's now more obvious that you need to upload a PDF before you can use the AI summary (because the LLM has to read the PDF).

- I've made a dedicated page to see all your tags just like you already have with stacks. You can't reorder them yet but hopefully I will add that soon.

- Export and search are coming soon!

- I'm thinking about your other suggestions, thank you!
by isk517 | 2026-01-27 18:30:13+00:00
People are pointing their fingers at QA, and while that is a big part of it I think the bigger issue is, like you said, them not really caring about some of their core products. Windows 11 seems to exist purely so that they can earn passive ad revenue while vacuuming up user data, Office 365 is now just a pile of mature applications that are slowly getting worse and new applications that are too unfinished to be actively useful.
by quinnjh | 2026-01-27 18:30:34+00:00
> Definitely, like drug dealers, you know they're cutting the good stuff with low cost cached gibberish.

Can confirm. My partner's chatGPT wouldnt return anything useful for her given a specific query involving web use, while i got the desired result sitting side by side. She contacted support and they said nothing they can do about it, her account is in an A/B test group without some features removed. I imagine this saves them considerable resources despite still billing customers for them.

how much this is occurring is anyones guess
by volkl48 | 2026-01-27 18:30:41+00:00
Most of Europe sees far fewer freeze-thaw cycles than most of the US does, which are a huge killer of roads.

The color scales aren't equivalent here but you can see the difference:

Europe - pretty much only unpopulated northern Scandinavia + up in the Alps/Pyrenees getting over 64 days, most of the most densely populated areas with lots of infrastructure below 32 days: https://www.atlas.impact2c.eu/en/climate/freeze-thaw-days/?p...

US - https://www.semanticscholar.org/paper/Climatology-of-Freeze-... (Fig 4.2) - Probably more than 50% is over 75 cycles, and large chunks breaking 100 cycles a year (almost all of New England and some other scattered patches, the Rockies/interior West/Western Plains).
by ceejayoz | 2026-01-27 18:30:46+00:00
Honestly, it's not even about the coffee. The lady working there would see me, greet me by name, ask after my kids, and start making my drink without me having to tell her my order. That was part of the Wegmans magic for a long, long time.

(Same reason closing the seafood counter got a big backlash. There's a similarly awesome guy working there. For now.)
by tokyobreakfast | 2026-01-27 18:31:07+00:00
Misleading title:

> even as hybrids held onto the largest overall share of the market

> Fully electric vehicles made up 22.6% of cars registered in the EU last month, edging out petrol cars on 22.5%. Gasoline-electric hybrids, including plug-in hybrids that can go limited distances on battery power alone, were the top group with 44%.

Like saying "Firefox takes the lead over Microsoft Edge in browser wars" even though it's fractions of a percent fighting over 3rd place. Gotta sell clicks somehow.
by poncho_romero | 2026-01-27 18:31:16+00:00
No one said "everyone from their country is a bad influence." Indians were viewed as model immigrants in Canada for decades. Again, their good name is being tarred due to bad government policy.

My point is is that if leftists cannot talk about immigration policy in a nuanced way, right-wing extremists (for there are no other kinds of right wingers these days) will be the only game in town, and people who want to talk about immigration policy will therefore be drawn towards them.

Humans see patterns in everything, that's how we work. You can be a naive idealist all you want, but that doesn't change the fact that people will inevitably associate the effects of a bad policy with the policy itself.
by tootie | 2026-01-27 18:31:38+00:00
That's ridiculous. Scientists absolutely ask these questions. We just don't have the answers so we don't make assumptions. It is implicitly assumed there is an enormous amount of proto- and pre-human culture and technology that is undiscovered or undiscoverable. We have very long known that hominins made tools, art and structures out of organic material that has decayed beyond our ability to detect.
by threatly | 2026-01-27 18:31:40+00:00
I’ve spent years reading cybersecurity news.
BleepingComputer, similar sites. Great content — just way too much of it every day.

So I built a small tool for myself.
It only sends me an email when something actually critical happens —
a major vulnerability or a security incident involving a supplier I use.

No feeds. No doomscrolling. Just signal.

Sharing it now for anyone dealing with the same problem. i call it threatly.ch :)

Greetings
by 0x3f | 2026-01-27 18:31:41+00:00
Let's be honest, even being an MM theorist is a form of self selection that enables another kind of discussion. Neoliberal disagreement with MMT is categorically different from e.g. its disagreements with neocons or socdems in general. The latter are often just moral beliefs or running with first principles in a way that niche economic frameworks are not.

I think your criticism of it as not being 'evidence based' because it 'rejects basic observation' is emotive but fundamentally it's still a technical criticism, not a moral one. Neocon criticisms of neoliberalism (even if they misidentify what that means) revolve around the decay of traditional values, for example. Socdems around inequality (which to them is ipso facto bad).
by bp93592203 | 2026-01-27 18:31:48+00:00
totally agree. Looks like the most common problem with the bubble is the terrible signal to noise ratio. Has anyone found a solution that works well? I see augment code is claiming their review agent is the best in terms of signal to noise ratio

https://www.augmentcode.com/blog/we-benchmarked-7-ai-code-re...

has anyone tried it?
by CSMastermind | 2026-01-27 18:32:06+00:00
One of the things I hated most about living in NYC was grocery shopping.

Having to walk meant you could only practically buy in small quantities, and visiting different places for different things was super annoying and inefficient.

Moving out and being able to take my car to the georcery store once a week and get everything I needed was one of the best quality of life upgrades from leaving.
by toyg | 2026-01-27 18:32:38+00:00
One of the joys of poetry is that it can contain multiple hard-to-describe facets of the same concept.

* The revolution won't be televised because they won't show it to you.

* The revolution won't be televised because it's not a passive, external experience that you just consume.

* The revolution won't be televised because it starts inside yourself.
by kingstnap | 2026-01-27 18:32:45+00:00
> from a practical standpoint, it is infeasible to formally understand every nuance of every law ever created just to be a citizen

I feel like this is basically the case in everything.

* A lot of people don't read the article before commenting.

* Nobody reads TOS for things.

* Most people don't read academic papers.

* MIT or BSD license is easy, but how many people here have actually read the whole GPL, Apache, or Mozilla licenses.

* Voter turnout in Municipal elections here in Ontario is incredibly low.

There is too much information out there for one person. Everything is done with value judgements.
Show HN: Fuzz testing tool for MCP servers
by proshan | 2026-01-27 18:32:47+00:00
Open-source fuzzer for MCP servers. Goal: make it easy to repeatedly throw malformed/odd requests at servers and catch crashes, hangs, and bad error handling.

If you’re building an MCP server, I’d love to know what you’d want from a fuzzer (corpus inputs, transport coverage, reporting, CI usage).
by qoez | 2026-01-27 18:33:00+00:00
Maybe off topic but this site feels very vibe coded to me. Doesn't mean it's necessarily slop, it seems interesting. But I guess it's just too much effort on the UI and other things like that which someone with a limited budget wouldn't spend time on (but an AI can) vs the core thing. Just an observation (and apologies if I'm wrong).
Show HN: Mystral Native – Run JavaScript games natively with WebGPU (no browser)
by Flux159 | 2026-01-27 18:33:05+00:00
Hi HN, I've been building Mystral Native — a lightweight native runtime that lets you write games in JavaScript/TypeScript using standard Web APIs (WebGPU, Canvas 2D, Web Audio, fetch) and run them as standalone desktop apps. Think "Electron for games" but without Chromium. Or a JS runtime like Node, Deno, or Bun but optimized for WebGPU (and bundling a window / event system using SDL3).

Why: I originally started by starting a new game engine in WebGPU, and I loved the iteration loop of writing Typescript & instantly seeing the changes in the browser with hot reloading. After getting something working and shipping a demo, I realized that shipping a whole browser doesn't really work if I also want the same codebase to work on mobile. Sure, I could use a webview, but that's not always a good or consistent experience for users - there are nuances with Safari on iOS supporting WebGPU, but not the same features that Chrome does on desktop. What I really wanted was a WebGPU runtime that is consistent & works on any platform. I was inspired by deno's --unsafe-webgpu flag, but I realized that deno probably wouldn't be a good fit long term because it doesn't support iOS or Android & doesn't bundle a window / event system (they have "bring your own window", but that means writing a lot of custom code for events, dealing with windowing, not to mention more specific things like implementing a WebAudio shim, etc.). So that got me down the path of building a native runtime specifically for games & that's Mystral Native.

So now with Mystral Native, I can have the same developer experience (write JS, use shaders in WGSL, call requestAnimationFrame) but get a real native binary I can ship to players on any platform without requiring a webview or a browser. No 200MB Chromium runtime, no CEF overhead, just the game code and a ~25MB runtime.

What it does:
- Full WebGPU via Dawn (Chrome's implementation) or wgpu-native (Rust)
- Native window & events via SDL3
- Canvas 2D support (Skia), Web Audio (SDL3), fetch (file/http/https)
- V8 for JS (same engine as Chrome/Node), also supports QuickJS and JSC
- ES modules, TypeScript via SWC
- Compile to single binary (think "pkg"): `mystral compile game.js --include assets -o my-game`
- macOS .app bundles with code signing, Linux/Windows standalone executables
- Embedding API for iOS and Android (JSC/QuickJS + wgpu-native)

It's early alpha — the core rendering path works well & I've tested on Mac, Linux (Ubuntu 24.04), and Windows 11, and some custom builds for iOS & Android to validate that they can work, but there's plenty to improve. Would love to get some feedback and see where it can go!

MIT licensed.

Repo: https://github.com/mystralengine/mystralnative

Docs: https://mystralengine.github.io/mystralnative/
by torstenvl | 2026-01-27 18:33:12+00:00
GTK4 is still pretty usable without libadwaita and all its Gnome-isms.

But frankly I think forking and maintaining GTK3 is preferable to moving to EFL or Qt. GIMP is still on GTK3. MATE is still on GTK3. Inkscape is still on GTK3 (but GTK4 work is in progress). Evolution is still on GTK3.

I think GTK3 will be around for a long time.
by badsectoracula | 2026-01-27 18:33:14+00:00
If they do not mind introducing C++ (they're introducing Rust so i guess multilanguage development isn't out of the question) then FLTK could be an option, though it'd probably need to improve its theming support.

They both have kinda similar roots in that XFCE originally used XForms which was an open source replacement of the SGI Forms library while FLTK also started as a somewhat compatible/inspired opensource replacement of SGI Forms in C++.
by mannanj | 2026-01-27 18:33:15+00:00
You haven't taken responsibility for your hostile, ad hominem style and straw man responses though. Why would I share anything with someone who engages me with that close-mindedness and uses and brings in words like "flat-earthers", "vaccine hesitancy" and all the other common psychosis and just plain ignorant and hostile words that color the conversation into a biased land?

No thanks. I can get that ignorance on Fox News or Cable television mainstream media. I've heard it all. It does nothing for me.
by asadotzler | 2026-01-27 18:33:33+00:00
My guess, a program manager high up in the engineering org and not a people manager. But suggesting a high up program manager doesn't direct people is also wrong. TPMs "make the wheels go 'round" in engineering. They very much control the fate of other individual, and often whole teams so their integrity and capability both matter considerably which means they should not be passing themselves off as a coder or their individual code projects as production ready.
by hwpky | 2026-01-27 18:33:43+00:00
Pressure to service larger customers to capture higher revenues is inevitable for Tailscale given the scale of VC funding, valuation, and operating costs involved.

Trying to be all things to all people will inevitably dilute focus, and it’s understandable that OP might be looking at this sub-product and wondering where the value is for their use cases.

They’re probably not the only ones questioning whether they’re still part of Tailscale’s core ICP (ideal customer profile), either.

Edit: expanded ICP for clarity.
by notepad0x90 | 2026-01-27 18:33:56+00:00
What skills are atrophying that would be useful in the future?

If you're letting LLMs do more than assisting, don't. That's my advice. But if like you're title they're just assisting you, then what skills are atrophying? You still review the code and understand it right? You still second guess the LLMs proposed solutions and look for better approaches right?

Articulating how LLM assistance is different than junior programmers writing code and assisting would be useful, everyone has different setups and workflows, so it's hard to say in my opinion.
by onetimeusename | 2026-01-27 18:34:06+00:00
TikTok said in a statement that glitches on the app were due to a power outage at a US data center. As a result, a spokesperson for TikTok US Joint Venture told CNN, it’s taking longer for videos to be uploaded and recommended to other users. The tech issues were “unrelated to last week’s news,” TikTok said.

There was a major storm over the weekend. I think the issues have been resolved. Is it still the case anti ICE videos can't be uploaded? Seems easy to test.
by WarmWash | 2026-01-27 18:34:07+00:00
Another way of looking at it is that humans (and apparently our close brethren) are tribal, don't give up fighting easily, and can generationally hold grudges.

Invaders of days gone by knew that even the young kids would grow up to "avenge their people", so to avoid problems (violence/killing against their tribe) in 10-15 years, it's better to just totally erase the population.
by bruce511 | 2026-01-27 18:34:07+00:00
I grew up in a time and place when terror bombings were "commonplace". And while actual bombs were rarish, bomb alerts were not.

The impact of a bomb at a post office or shopping mall or commuter train was way more impactful than planes. Only a small number of people flew, and that was easily avoided if you cared. It's a lot harder to process when a place you go regularly explodes.

Flying into buildings is not gonna happen again. That tactic didn't survive even a few hours as UA 93 demonstrated. Passengers won't allow it, and these days the cockpit door are locked.
by uejfiweun | 2026-01-27 18:34:07+00:00
Honestly, how long do you guys think we have left as SWEs with high pay? Like the SWE job will still exist, but with a much lower technical barrier of entry, it strikes me that the pay is going to decrease a lot. Obviously BigCo codebases are extremely complex, more than Claude Code can handle right now, but I'd say there's definitely a timer running here. The big question for my life personally is whether I can reach certain financial milestones before my earnings potential permanently decreases.
by olivdums | 2026-01-27 18:34:18+00:00
Hi HN,

I've built this completely free project for React devs regardless your skills,
Lessons and exercises either on the web or embedded in your IDE (VsCode / Cursor / Antigravity / Windsurf),

I'm improving the courses and UX every day,
Would love your feedback!

Cheers,

Oli
by hollowturtle | 2026-01-27 18:34:25+00:00
> Coding workflow. Given the latest lift in LLM coding capability, like many others I rapidly went from about 80% manual+autocomplete coding and 20% agents in November to 80% agent coding and 20% edits+touchups in December

Anyone wondering what exactly is he actually building? What? Where?

> The mistakes have changed a lot - they are not simple syntax errors anymore, they are subtle conceptual errors that a slightly sloppy, hasty junior dev might do.

I would LOVE to have jsut syntax errors produced by LLMs, "subtle conceptual errors that a slightly sloppy, hasty junior dev might do." are neither subtle nor slightly sloppy, they actually are serious and harmful, and no junior devs have no experience to fix those.

> They will implement an inefficient, bloated, brittle construction over 1000 lines of code and it's up to you to be like "umm couldn't you just do this instead?"

Why just not hand write 100 loc with the help of an LLM for tests, documentation and some autocomplete instead of making it write 1000 loc and then clean it up? Also very difficult to do, 1000 lines is a lot.

> Tenacity. It's so interesting to watch an agent relentlessly work at something. They never get tired, they never get demoralized, they just keep going and trying things where a person would have given up long ago to fight another day.

It's a computer program running in the cloud, what exactly did he expected?

> Speedups. It's not clear how to measure the "speedup" of LLM assistance.

See above

> 2) I can approach code that I couldn't work on before because of knowledge/skill issue. So certainly it's speedup, but it's possibly a lot more an expansion.

mmm not sure, if you don't have domain knowledge you could have an initial stubb at the problem, what when you need to iterate over it? You don't if you don't have domain knowledge on your own

> Fun. I didn't anticipate that with agents programming feels more fun because a lot of the fill in the blanks drudgery is removed and what remains is the creative part.

No it's not fun, eg LLMs produce uninteresting uis, mostly bloated with react/html

> Atrophy. I've already noticed that I am slowly starting to atrophy my ability to write code manually.

My bet is that sooner or later he will get back to coding by hand for periods of time to avoid that, like many others, the damage overreliance on these tools bring is serious.

> Largely due to all the little mostly syntactic details involved in programming, you can review code just fine even if you struggle to write it.

No programming it's not "syntactic details" the practice of programming it's everything but "syntactic details", one should learn how to program not the language X or Y

> What happens to the "10X engineer" - the ratio of productivity between the mean and the max engineer? It's quite possible that this grows a lot.

Yet no measurable econimic effects so far

> Armed with LLMs, do generalists increasingly outperform specialists? LLMs are a lot better at fill in the blanks (the micro) than grand strategy (the macro).

Did people with a smartphone outperformed photographers?
by wredcoll | 2026-01-27 18:34:27+00:00
Look, I get the fantasy of someday pulling out my musket^W ar15 and rushing downstairs to blow away my wife^W an evil intruder, but, like, we live in a society. And it has a lot of benefits, but it does mean you don't get to be "king of your castle" any more.

Living in a country with hundreds of millions of other civilians or a city with tens of thousands means compromising what you're allowed to do when it affects other people.

There's a reason we have attractive nuisance laws and you aren't allowed to put a slide on your yard that electrocutes anyone who touches it.

None of this, of course, applies to "poisoning" llms, that's whatever. But all your examples involved actual humans being attacked, not some database.
by verdverm | 2026-01-27 18:34:35+00:00
I have a secret manager, why would I want tails ale involved in the management of secrets, they are a networking company

Tails ale is not a company I see being involved in my core AI ops. I don't need their visibility tools, I already have LGTM.

Tailscale should focus on their core competency, not chase the gilded Ai hype cycle. I have sufficient complaints about their core product that this effort is a red flag for me. To do this now, instead of years ago, shows how behind the times they are