MurphyA/hacker-news huggingface dataset:
by charcircuit | 2026-01-28 21:33:16+00:00
>At which point hardware attestation accomplishes nothing

Attestation could be used to say that the user is not using a secure version of the OS That has known vulnerabilities patched.

>Any banking app is forced to support them or they will lose customers.

Remote attestation is just one of the many signals used for detecting fraud.

>one or more zero days

Many phones are not on an OS getting security updates. Whether that be due to age or the vendor not distributing the security patches. Even using old exploits malware can work.
by Frotag | 2026-01-28 21:33:20+00:00
> The gateway device performs 1:1 NAT. Traffic arriving for 100.97.14.3 is destination-translated to 192.168.1.100, and the source is masqueraded to the gateway's own LAN address.

Couldn't you tell the WG devices that 192.168.2.0/24 refers to the 192.168.1.0/24 network at customer A, such that 192.168.2.55 is routed to 192.168.1.55. Same for 192.168.3.0/24 referring to customer B.

I think this is what the article is getting at but I don't see the value in manually assigning an alias to each non-wg device, versus assigning an alias to the entire LAN.
by 15155 | 2026-01-28 21:33:27+00:00
Grade school math. Look at income tax receipts: the top 5% pay >61% of all income taxes.

You can try and split hairs with "sales taxes" and "payroll taxes" and try to shimmy things into some anti-capitalist stance ("but the companies benefit from their labor!!!," "renters pay property taxes indirectly!"), but the overwhelming majority of all tax payments come from a small percentage of individuals.
by spacechild1 | 2026-01-28 21:33:53+00:00
Again, why did you claim that Alex' gun went off as if that was a fact?

> It's just that the first one likely caused the rest of it as the surrounding officers didn't know who was shooting.

No need to speculate. If you watch https://youtu.be/i8kFcK-X-vQ?t=108 you will see that the first agent shoots Alex in the back one time and another three times while they all move away. Note that Alex has been restrained the whole time. One second later, you hear 6 more shots. This is where the second agent got involved. At this point, Alex has already been lying on the ground.

> because "gun" was yelled, would that turn this into anything else than an accident?

At best this was an accident, but even then it was the agents fault for misinterpreting the situation or the DHS's fault for deploying badly trained agents. (Hearing the words "Gun!" does not give officers the permit to shoot, unless they perceive an imminent threat to their or someone else's life!) However, if you watch the video above, you can see that an agent removes Alex' gun right in front of the agent who fires the first shots. There are lots of open questions.

> The best way to appear not to have a gun, nor appear dangerous at all, is not bring a gun to a protest.

The act of conceiled carrying alone does not make you a threat. Alex never behaved in a threatening way.

Instead of putting the blame solely on Alex, maybe ask yourself what the agents could have done to deescalate the situation, what kind of people the DHS recruits as ICE agents and if their training is appropriate for urban policing.
by mannanj | 2026-01-28 21:34:25+00:00
> If all jobs were taken by AI in a short time span, the companies owning and operating those AIs would go out of business as no one would be able to afford the products made by the AIs

I think The companies would go out of business if the government did not subsidize them as a matter of public or national security interest. Do you think that would not be the case? It doesn't take much for a company with money to lobby for this and for the power of marketing and mainstream media to make the public perceive this as the right decision - in fact a study of our history would reveal this as the more likely scenario so as a company racing to render the labor market obsolete its in their interest to disrupt it to capture any amount of it.
by ceejayoz | 2026-01-28 21:34:27+00:00
> A lone penguin wandering off is never going to create a new, badass species.

Sure. But two might.

Or the behavior may sometimes benefit the colony a few coves over with some new genes every so often.

See also: Homosexuality in various animals, including humans. Individually, not great for your genes' survival. Collectively, seems to have enough of an advantage to the species to not be selected out.
by extraduder_ire | 2026-01-28 21:34:49+00:00
I didn't find anything from a short keyword search and a read through some of his other blogposts, but I would not be surprised if he were a republican in the "prefers a republic as a form of government" sense. (I'm one, and am very much not a fan of the US political party by that name)

Surprisingly neutral on topics regarding monarchy/monarchs, in favour of the AV referendum to get rid of plurality voting, and very annoyed at the electoral system for unilaterally changing his name on the voter rolls. (His surname is Q)
by FloorEgg | 2026-01-28 21:35:07+00:00
I've also heard this referred to as jevons paradox.

I use AI to build AI systems that are being used and paid for by real users. I'm in the trenches doing customer discovery, designing UX and producing product. Everything I do in my work either leverages AI or is built on AI capabilities.

The LLMs we have today are not capable of replacing most human knowledge worker jobs, and it's not clear to me they will be anytime soon. They are powerful tools but they are not remotely as generally intelligent as people.

The applications being built are more like power tools. The power drill and power saw didn't replace carpenters, it just enabled them to build more and faster.

People see a language calculator doing things that seem super human and assume it will replace human knowledge work, but without realizing the actual range of human intelligence and how it contrasts to LLMs.

There were people with the job title "calculator", and we don't have those narrow jobs any more, but there are more people using electronic calculators/computers to do calculations in their work than ever before.

There are at least three important misconceptions in thinking that AI is going to replace all human labor anytime soon:

- underestimating human intelligence

- overestimating current AI and it's rate of progress

- underestimating current unmet and future demand for getting stuff done

Even if AI makes knowledge work 99% more efficient, it doesn't mean there will be 99% fewer knowledge workers... More likely it means that there will be 100x or more demand for knowledge work, and the demand for the human components will stay the same or even grow.
by jrs235 | 2026-01-28 21:35:09+00:00
>why so and so who said they didn't open the email did have an open event

This was one of the first known issues when Gmail and others began checking and preloading images/content in emails. It was "triggering" that events/requests to tracking pixels. Eventually folks learned and knew to check the user agent to determine if it was just the mail provider preloading/checking the email content.
by forgotpwd16 | 2026-01-28 21:35:15+00:00
You seem to have gotten used to perfect written commit messages by Claude. Many people, especially those starting out with, or not heavily using, git, do write messages like that. (edit: To be honest sometimes I too make temporary "wtf" commits; I just later squash them and no one knows.) That can actually be seen in this very repo by the refactor ones. And, the commits themselves are actually where I'm basing it. Small changes (vibe coders tend to forget a vcs exists; why you see 20k LOC first commits), commented-out code parts (have you ever seen AI commenting out code?), plain code comments (again compare to what refactor commits introduce).
by warkdarrior | 2026-01-28 21:35:15+00:00
Not much of a time saver:

> "Is it safe to let an AI into my apps? You approve every connection. You can watch it work in real-time. Nothing sensitive happens without your say. Your data stays yours - we don't train on it."

I worked with (human!) interns and most of them did not require being watched in real-time.
by Aurornis | 2026-01-28 21:36:03+00:00
That person's pinned message shows that he started his campaign for Congress almost 2 months ago. He says he was laid off today. He's been Tweeting non-stop daily and appears to be working hard on his campaign.

I don't think you can separate his active run for Congress from this layoff. Making an actual run for Congress is a huge time commitment and I don't see how it would be compatible with being an L7 manager at Amazon. It's not something you do in your free time.

His campaign platform also appears to be about AI taking jobs, so I'm more than a little suspicious that getting laid off was part of the plan rather than an actual surprise.

The claim that he "built systems" should also be taken in the context of his job title, which was in product management. I've held the Product Manager title for a few years, but I wouldn't claim "I built" during those times, because I was not the one doing the building. This strikes me as a little misleading.

Also that post is full of classic LLM-ism from beginning to end. Note the overuse of the "It's not this, it's that" format and other LLM tells. I might give someone the benefit of the doubt if they were immersed in LLMs so long that they started speaking like an LLM, but given all of the other context surrounding this post I have a high suspicion it was written by AI.
by thr1owaway9621 | 2026-01-28 21:36:07+00:00
I never realized Windows tuning was a thing (WindHawk, Start11). Thank you for mentioning those.

I recently had to install Windows 11 to play a video game that runs janky on Linux, and I am encountering all the annoying problems people are describing in this thread (forced updates, full-screen ads, etc). It does not bother me too much, since I effectively use Windows only to play that one game. But maybe I can tune Windows 11 into something less obtrusive with the custom hacks. Thanks.
by VorpalWay | 2026-01-28 21:36:17+00:00
My experience is with Aruduino wiring vs Rust with embassy. And very much from a hobbyist POV.

Rust on embedded uses a HAL layer, which is vendor independent (and resolved at compile time, like templates would be in C++). It doesnt cover everything yet, but basics like GPIO, SPI, I2C etc are covered. This avoids the issue of N drivers times M vendor SDKs: I2C drivers can just be written against the HAL, and you instantiate with a specific HAL in your application. Also reduces vendor lock-in. The setup process still requires some chip specific code to select which pins to use etc, but once you are past that you can be vendor neutral.

Speaking of which, the API uses some clever patterns (called typestate) to ensure at compile time that your peripheral config is valid: if you "take" GPIO2 you can do that again, so you can't give the same pin to two different pieces of code by mistake. And if the driver expects a pin configured as output you can't give an input pin (you can convert a pin to "dynamic at runtime" if you really need to, so there is an escape hatch).

Then there is the embassy framework. This is an alternative to RTOSes (there are some Rust RTOSes as well, haven't tried them). It makes use of async/await tasks in Rust that are statically allocated and scheduled. You can have several priority levels of schedulers (even though internally the schedulers are cooperative for the tasks inside, but they are preempting between schedulers by using interrupts).

Async actually makes many things on embedded easier, such as waiting for a GPIO. No longer do you need to write your own interrupt handler, or figure out when to put the chip on a low power state, the scheduler and HAL futures do it for you.

All that said: C++ still is a larger ecosystem with more tutorials, drivers and better chip support. But that is advancing rapidly in the Rust world. ESP32 series has official vendor support in Rust for example, as does at least one or two other vendors (or they are in the process of adding it). Popular chips like the RP2040 etc have support, and I have seen HALs for NRF and ST around (but never played with them). Drivers for common chips exist.

So I would say it is worth experimenting with at least, but you should check up front what HALs and drivers exist for what you want to use and check how complete those are. Two years ago I wanted to do I2S things on the ESP32, but that was still missing. A year ago it had support, but some of the DMA things were clunky still. I should check again some time.
by takinola | 2026-01-28 21:36:32+00:00
I am always mystified by the level of attention applied to the Doomsday Clock. The organization behind it seems to be staffed by serious (TM) people so there is probably some amount of analysis behind their proclamations but to what end? What is the difference between 85 seconds to midnight or 100 seconds or one hour? All sound pretty scary to me so I can't quite differentiate if I should be more scared (by how much? to what end??). This really seems like the power of storytelling (the clock metaphor is really striking) over any real substance.
by danaris | 2026-01-28 21:36:52+00:00
With a proper personalized tracking pixel, a simple deduplication won't catch it—the whole point is that each email's tracking pixel has a unique URL that lets them know that you opened the email.

It is, of course, very possible that Google has heuristics that can catch tracking pixels—in fact, I would go so far as to say that if they chose to, they 100% could, probably tomorrow. But given where Google makes its money, I would not in the least trust them to do that for me.
by criddell | 2026-01-28 21:37:11+00:00
This always feels like the result of leadership too scared to build. It's so much safer and easier to tear down.

Amazon spent a lot of time and money and built a top-tier workforce. But now they are out of ideas for what these people can do? They don't have any untapped opportunities left? No projects that never quite made it to the top of the stack? No deferred maintenance that could be taken care of now?
by nine_k | 2026-01-28 21:37:21+00:00
An AI-proof writing tool is a pen and paper, on a glass table, in a Faraday-cage locked room, etc, etc.

Depending on how high are the stakes, weeding off just the most obvious cases of AI usage may be enough. But wherever an electronic input is involved, it can be emulated in ways that are impossible to detect on a reasonable budget. Content analysis may help somehow, but again it would only detect the more obvious cases.
by prewett | 2026-01-28 21:37:54+00:00
Perhaps it is worth noting that Brett Devreaux skewered this guy (regarding a different topic) in his latest acoup.blog.

I'm actually sympathetic with his perspective, and I was frustrated by Mary Beard's "SQPR" when she kept saying things like "of course, this list of consuls cannot possibly be right", because, of course ancient people can't even keep a quality list over 300 years. And in any case, they were a lot closer to it that Beard is, so it's as good as it's going to get. I find what passes for virtue in elite circles to be appalling, self-righteous, and uninteresting, so I'm not likely to be reading new books without good quality recommendations. (But that would be the case anyway, I only have N book-readings to spend in my life, no point spending them on anything poor.)

But fiction is absolutely worth reading. First, as entertainment it beats all the passive forms. Also, books don't dumb things down to the lowest denominator like American television does. But you can actually learn a lot from fiction. O'Henry gives a picture of NYC in 1900, Jane Austen gives a flavor of lower-elite Edwardian life, etc. Good fiction tends to deal with tensions of life, like duty/delight, or in Austen's case the need to marry well to have enough money to live like you were raised but you also need to find a man worth marrying. And, of course, the perspectives you get reading Iliad, Beowulf, Treasure Island, and Tolkien are all very different, which will expand your mind, too.
by jleyank | 2026-01-28 21:37:55+00:00
They should easily be able to make their own rifles and pistols and ammunition. They can repurpose car/truck plants to make jeeps, trucks and light armoured vehicles (if they don't get them from Canada). They, hopefully, have the high-tech software and manufacturing to create air-air or surface-air missiles and associated radar. The only heavy manufacturing items would be artillery and its shells.

Yeah, there's no mention of tanks but they, too, can be made if they're still necessary. There's a chance that such big-thing weapons are less useful than they used to be based on the results in Ukraine. Europe doesn't really need to build ships in quantity as they're the target more than the attacker.

This will take political will. Open question whether countries and their politicians can or will muster such will. But as many have written, it's time for the rest of the world to stand together vs. the 3 large countries. Perhaps they need to stand up some infantry and engineering units to get boots on the ground and organized groups that can handle disasters as well as combat engineering.

And yeah, stop sending cash elsewhere for the expensive weapons that might not work as you expect them (or when you expect).
by amputect | 2026-01-28 21:38:07+00:00
I switched my gaming laptop over to CachyOS (which is more or less "Arch with some good defaults for gaming and a curated runtime environment") because I literally couldn't play Stellaris on my $1800, year-old gaming laptop without regular hard crashes that locked up the entire system and required a hold-the-power-button-down hard reboot. This is apparently a rare but known issue on the Paradox forums, affecting many of their games, and it seems to be due to some problem with the 24h2 windows update on some machines, but there's no clear resolution. Eventually I got mad enough to just pave my entire gaming laptop and switch wholly over to Cachyos.

Since switching, I have not experienced a single problem with Stellaris, even running larger galaxies in longer games with more mods. I haven't had any compatibility issues or bugs or anything with my other games either. It was so painless that I switched my desktop over as well, and I no longer have a windows device. I've been really pleasantly surprised by how many games support Linux now.
by extraduder_ire | 2026-01-28 21:38:30+00:00
IIRC, google limits their opening of remote images if they're unique per email or from less reputable sources.

They also send you an email back saying your email wasn't delivered after a few days or hours, so there's little benefit in using the tracking pixel to determine if an address exists.

Don't know if they fetch images from emails sent to non-existent addresses, but I would if I were to design such a system.
by Towaway69 | 2026-01-28 21:38:41+00:00
Or they find a new feeding ground? Why does the universe bend to “badass penguins”?

The universe really does not care, in a “badass” way. Major league not caring.

It’s our interpretation that something is “badass” mainly because our species has pretty much negatively affected most parts of the environment.

It’s us that are “badass” and don’t “get it” when it comes to nature and the environment.

As someone else points out, there is no such thing as a nihilist penguin, it’s purely us putting a label on behaviour that we - once again - don’t understand.
by rdtsc | 2026-01-28 21:38:49+00:00
> Start-ups and venture-capital investment could begin to flow to lower-tax states; the next hub of technological innovation may end up being seeded in Austin or Miami instead of Silicon Valley.

There is another agent (group of agents) in this game and that's other states. Those states are often modeled as passive background places one can move to, but they are often not. They can, and do, react to tax laws in other states. For example, TX could encourage capital flight by offering tax breaks.

I've seen this happen with some companies in Midwest: as the states had to raise taxes some Southern states decide to poach individual companies and offered them to move their HQs there with a bunch of tax rebates and credits and such.

> The tax’s designers, however, think they’ve come up with a clever solution to capital flight: a one-off tax that is retroactive, based on a billionaire’s residency status on January 1, 2026.

That is pretty clever. They could also have an "exit tax" -- "leave but if you've been here for 10 years making your billions, we'll keep some of those billions" kind of a deal.
by int_19h | 2026-01-28 21:38:50+00:00
You are looking at this from the perspective of someone to whom "my ancestors fucked everything up" is obvious and self-evident. Many people don't see it this way.

FWIW when it comes to Russia specifically, I would broadly agree that the problem there is not just the government but the culture as a whole (although we'd probably disagree about the specific things in that culture that are problematic). It is not obvious, though, and I think it always behooves one to be careful when making sweeping generalizations like that and carefully rationalize them.
by echelon | 2026-01-28 21:39:05+00:00
Speaking of "crafting", I think this is the perfect word to describe something more than "prompting".

It's extremely hard to block out a scene with just words, eg. "rotate hand 45 degrees, stand perpendicular to the column, shadows from light source 60 degrees above horizon, large box in front of chest, approximately 2 feet wide", etc.

Image-to-image, ControlNets, previz-to-final, etc. are the way to go, and I'm convinced this is the core interface for image and video creation. Text prompts will get you a coarse grained first approximation, which you then visually adjust to your exact needs with UI/UX-first models.

I built an intentional "crafting" engine so people could mold images like clay, with full intention:

https://github.com/storytold/artcraft

This is really early days though. I expect more tools and models to enable you to fully manipulate everything first-class, in 2d/3d. As if everything in an image were mutable.

As a film director, this is really exciting stuff.
by Esophagus4 | 2026-01-28 21:39:15+00:00
Awesome! So the agent has access to the DOM/JS running in the browser?

That’s one of my biggest headaches writing user scripts currently: I write the script in an IDE with Claude then copy it to the browser / manually test it in the browser, then copy the results back to Claude or tell it what went wrong.

Looking forward to trying this.
by watwut | 2026-01-28 21:39:22+00:00
Nuanced understanding of a thing does not necessary ends up with opinion in the middle. Sometimes, understanding the nuance will make you walk away with "yep, this is bad and dangerous" conclusion.

Overwhelming majority of people concluding that shooting protesters to back or head is a bad thing does not imply lack of nuance or low quality of the discussion. Overwhelming majority of people concluding that political repressions and fear based government are bad thing does not not imply lack of nuance or low quality of the discussion either.

The both sides and truth in the middle knee jerk is does not represent nuance or meaningful discussion. It frequently muddles nuances, creates false equivalences and makes the discussion loose the substance.
by Johanx64 | 2026-01-28 21:40:00+00:00
The same isn't true for modern embedded devices, they don't have tile rendering hardware.
If you connect a i2c/SPI screen (SSD1306, ST7735), you write all the pixels on the screen (or pixels to some subregion of the screen), these screens do have a backing memory in them.

So in order to draw a line, you will - objectively - have to copy/move more bytes if you approximate line with character symbols.

This isn't a big deal, but crazy efficient it is not.

All the efficiency when drawing on those screens mostly relies on how well you chain together DMA transfers to portions of the screen you want stuff to be drawn to, so that SPI transfers aren't blocking the CPU (that's assuming you don't have memory for a second full-screen buffer).