MurphyA/hacker-news huggingface dataset:
by Tiberium | 2026-01-14 21:09:36+00:00
A bit unrelated, but if you ever find a malicious use of Anthropic APIs like that, you can just upload the key to a GitHub Gist or a public repo - Anthropic is a GitHub scanning partner, so the key will be revoked almost instantly (you can delete the gist afterwards).

It works for a lot of other providers too, including OpenAI (which also has file APIs, by the way).

https://support.claude.com/en/articles/9767949-api-key-best-...

https://docs.github.com/en/code-security/reference/secret-se...
by firefax | 2026-01-14 21:09:45+00:00
>Presumably the phones are tapped?

If you simply list a location and time, it's hard to suss out whether it's a coffee or a protest. And there's a limit on how many people can be surveilled in real time, with the focus probably being on organizers not attendees. You're correct it's a possibility, but as a practical matter they can't listen to everyone, all the time -- but the key is to organize some "event" that overwhelms the regime, or days or weeks later they will possibly get around to your intercept and give you grief, yes.

But if the internet has been cut off and the bodies are piling up, sometimes you might choose to take a calculated risk.
by AlienRobot | 2026-01-14 21:09:48+00:00
Exactly. Everything "private" that you post online will become public eventually.

Everyone says "we only store the data temporarily and it's deleted right after" including everyone who didn't do that and got hacked.

But I think we're far too late into this issue by now.

It's 2026 and we still don't have a way to know if our passwords are being stored in a secure way in their databases. What hope do we have to know about how our photos are being handled?
by ramoz | 2026-01-14 21:10:40+00:00
Sandboxes are an overhyped buzzword of 2026. We wanna be able to do meaningful things with agents. Even in remote instances, we want to be able to connect agents to our data. I think there's a lot of over-engineering going there & there are simpler wins to protect the file system, otherwise there are more important things we need to focus on.

Securing autonomous, goal-oriented AI Agents presents inherent challenges that necessitate a departure from traditional application or network security models. The concept of containment (sandboxing) for a highly adaptive, intelligent entity is intrinsically limited. A sufficiently sophisticated agent, operating with defined goals and strategic planning, possesses the capacity to discover and exploit vulnerabilities or circumvent established security perimeters.
by treetalker | 2026-01-14 21:10:59+00:00
I don't know, I

*******
SUBSCRIBE TO TREETALKER'S COMMENTS
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
*******

sometimes like reading things

*******
SUBSCRIBERS ENJOY AN AD-FREE EXPERIENCE
*******

on Medium and Substack.

*******
INTERESTED IN MORE
TREETALKER CONTENT?
*******
by vjerancrnjak | 2026-01-14 21:12:15+00:00
Not sure how that helps. They mention SKIP LOCKED but then show a job with 15 minute duration.

How will you hold an open transaction for 15 minutes without seriously compromising the performance of the database?

Allowing people to do this easily will just result in an antipattern with horrible performance and reliability once network starts to randomly end transactions. Pretty sure, just like Python can’t figure out connection to the db was closed, so can’t Rails.

Once people add transaction pinning proxies, and try to actually get most performance from db, these kind of locking mechanisms that require a long running open transaction start falling apart.

Edit: I must have misunderstood and it is a lease.
by hakanderyal | 2026-01-14 21:12:19+00:00
This was apparent from the beginning. And until prompt injection is solved, this will happen, again and again.

Also, I'll break my own rule and make a "meta" comment here.

Imagine HN in 1999: 'Bobby Tables just dropped the production database. This is what happens when you let user input touch your queries. We TOLD you this dynamic web stuff was a mistake. Static HTML never had injection attacks. Real programmers use stored procedures and validate everything by hand.'

It's sounding more and more like this in here.
by saulpw | 2026-01-14 21:12:43+00:00
That's fine, and I know that, but I have never heard of anyone doing that to publish something 'more human' on their blog. Not to say that it's never happened, but when I see some pretty basic typos in a blog post that also sounds like actual human frustration, Occam's Razor says it's fair to assume that a human made those typos.
by stack_framer | 2026-01-14 21:14:00+00:00
Comments about Elon on HN have become exhaustingly cringe; dripping with devout derision, reeking of righteous reproach, and smacking of sanctimonious seething.

Apparently we must all gnash our teeth at the mere mention of "that man" or anything associated with him. It's as plebeian as it is predictable.

I'm sure this will now be downvoted into oblivion and I'll be accused of "defending an avowed racist" or some other such nonsense.
Show HN: A self-hosted code search with bulk replace and auto PRs
by aanogueira | 2026-01-14 21:14:10+00:00
Hi HN,

I built Code Search because I got tired of the gap between "finding code" and "fixing code" at scale.

The workflow I wanted: search for a deprecated pattern across all my repos, preview the replacements, then have the tool create branches and open merge requests automatically. Existing tools either couldn't do this or required enterprise infrastructure I didn't have.

What it does:

- Sub-second regex search using Zoekt (trigram indexing)
- Bulk find-and-replace across repositories
- Automatic branch creation and MR/PR opening
- Web UI, CLI, and REST API
- Connects to GitHub, GitLab, Bitbucket, Gitea

Tech: Go backend, Next.js frontend, runs on Docker Compose.

I've been using it to manage ~1,000 repos. The bulk replace feature alone has saved me hours of tedious work.

Feedback welcome, especially on the architecture decisions documented.
Show HN: A discussion-first community for opinions
by taptap4 | 2026-01-14 21:14:12+00:00
Hi, I built a small experiment around discussions and opinions.
Instead of a global feed, everything is organized into topic-based channels, so conversations stay contextual and don’t disappear over time.

There’s no content yet — I’m sharing this at an early stage and looking for participants.
The idea is to make disagreement readable, letting different viewpoints live side by side without optimizing for engagement or timelines.

Thanks to anyone who takes a look or shares their thoughts.
by bscphil | 2026-01-14 21:14:36+00:00
It is relevant, though. I have 1.2 Gbps down with a 2 TB monthly cap. I've never hit the monthly cap even once, but by your standard I have "1.2 Gbps down for 3 hours, 42 minutes".

But that doesn't change the reality that it matters to me that a 20 GB video that a friend took at my wedding downloads in just 2 minutes rather than the ~30 minutes it would take if I had a 100 Mbps connection.
by giannicancelli | 2026-01-14 21:14:50+00:00
I would like the shell to support advanced job control:
Ability to suspend processes (Ctrl+Z) and resume them (fg, bg).
Display all active jobs with jobs.
Interactively select which job to resume, for example via a numbered menu or a list to choose from, instead of manually typing fg %<job_number>.
, support both foreground and background jobs and allow managing multiple jobs simultaneously.

You can leverage existing bash/zsh functionality as a base, but the key feature is interactive job selection.
by 3ple_alpha | 2026-01-14 21:15:27+00:00
Don't let this situation define who you are, there is more to life than one particular career path (or even payed work in general, to be honest). Just because things haven't worked out the way you wanted at this time, does not make you "a failure" by any means, and don't let anyone tell you otherwise.

Others have (and will) given specific career advice, meanwhile I'd like to emphasise this: you absolutely can, and should, do hobbies, preferably including such that involve physical activity cause that's good for your health. Doomscrolling is not a good one. You have every right to have free time and to enjoy it, everyone does.
by ofalkaed | 2026-01-14 21:15:40+00:00
>I wonder why the thread got flagged.

It is off-topic.

>On-Topic: Anything that good hackers would find interesting. That includes more than hacking and startups. If you had to reduce it to a sentence, the answer might be: anything that gratifies one's intellectual curiosity.

>Off-Topic: Most stories about politics, or crime, or sports, or celebrities, unless they're evidence of some interesting new phenomenon. Videos of pratfalls or disasters, or cute animal pictures. If they'd cover it on TV news, it's probably off-topic.
by B56b | 2026-01-14 21:15:51+00:00
I actually do think that Dr. Haidt is a good source for getting a fair understanding of both sides of the issue. If you've read or listened to him you'll know that it's a huge part of his ethos.

Here's his rebuttal to that article: https://www.afterbabel.com/p/phone-based-childhood-cause-epi....

I think you'd struggle to find someone more earnestly trying to get an unbiased understanding of the reality of this topic.
by bhartzer | 2026-01-14 21:15:57+00:00
https://www.billhartzer.com - personal blog where I've been writing/posting for over 20 years. Tell me about your project/site/app/service and I'll write about it. Always looking for article ideas.

https://www.hartzerdomains.com - personal list of domain names I own, in case someone needs a domain name for a project.
by tracker1 | 2026-01-14 21:15:57+00:00
Beyond just the monthly/yearly changes are the cumulative affects of those changes and disparities of wage stagnation with record inflation over time. Increased rent/housing costs are also a massive factor.

Not even counting the number of households who are at credit card and other debt limits at close to 30% interest. Trump has given some lip service to trying to get this down to 10%, but it'll really take congress to make anything happen that has a chance of sticking.

A lot of people are very underwater.
by anardil | 2026-01-14 21:16:04+00:00
https://goto.anardil.net/ - Launchpad for all my other (16!) sites.

The main ones are:

https://diving.anardil.net/ - Scuba diving picture gallery; organized by timeline, common name, taxonomy, and more

https://dnd.anardil.net/ - Artifacts from my groups' D&D games

https://pirates.anardil.net/ - Pirate insult generator

https://alchemy.anardil.net/ - Morrowind (TES 3) alchemy calculator
by dust42 | 2026-01-14 21:16:35+00:00
I don't get all this frontier stuff. Up to today the best model for coding was DeepSeek-V3-0324. The newer models are getting worse and worse trying to cater for an ever larger audience. Already the absolute suckage of emoticons sprinkled all over the code in order to please lm-arena users. Honestly, who spends his time on lm-arena? And yet it spoils it for everybody. It is a disease.

Same goes for all these overly verbose answers. They are clogging my context window now with irrelevant crap. And being used to a model is often more important for productivity than SOTA frontier mega giga tera.

I have yet to see any frontier model that is proficient in anything but js and react. And often I get better results with a local 30B model running on llama.cpp. And the reason for that is that I can edit the answers of the model too. I can simply kick out all the extra crap of the context and keep it focused. Impossible with SOTA and frontier.
by lcnPylGDnU4H9OF | 2026-01-14 21:17:37+00:00
I'm not really interested in doing that. My question was asked firstly to give you an opportunity to explain your perspective around what I saw to be a not obvious claim and secondly to bring light to the fact that you can't explain it (if that happens to be the case as it seems here).

The opportunity for you to explain it is an opportunity to exonerate your point of view. You don't have to take it.
by antomal | 2026-01-14 21:17:54+00:00
Actually, GRSH already supports this!

You can use Ctrl+Z to suspend, and fg for basic job control. Regarding the interactive selection you mentioned: that’s one of the core features I wanted to get right from the start. Instead of memorizing job IDs, you can manage them interactively.

I’m a big fan of reducing the cognitive load when multitasking in the terminal, so I’m glad we share the same vision for a more modern job control experience!
by lisdexan | 2026-01-14 21:18:13+00:00
I don't know, FIFA is a den of villainy, but what happens if I dunno... half the Brazilian team ends up on an ICE camp? It wouldn't be during airport customs, but what if Agent Cletus sees the team bus and thinks that he can get a nice bonus.

FIFA will ignore unlimited human suffering but if matches don't happen it might be a problem.
by realityfactchex | 2026-01-14 21:18:31+00:00
Whether they do some kind of reasoning or not, they have all the biases included that come from their training/programming: what material was included, how that material is handled, etc.

AFAIAA, there's certainly not even a single frontier model, trained on "the internet", that is able to process information factually and in an unbiased manner.

So, they're not really reasoning impartially, as a computer "should" be wont to do. They're regurgitating biases. In a word: parroting.

Can you coax a model into seeming fair, via context? Sure. But, the baseline would be need to be based on reasoning ab initio, to qualify as reasoning. Otherwise, they are, again, parroting.

It's important to not mis-state what is or is not "emergent reasoning", or else people will think we have something that we don't, because some expert said so.

Disagree? Do you think that there is at least one accessible frontier model trained on the internet that is not parroting the baises of its creators and users, and performs its own "emergent reasoning" (instead of just doing something that mimics doing that)? Then please link to it.
by schmichael | 2026-01-14 21:18:39+00:00
> We TOLD you this dynamic web stuff was a mistake. Static HTML never had injection attacks.

Your comparison is useful but wrong. I was online in 99 and the 00s when SQL injection was common, and we were telling people to stop using string interpolation for SQL! Parameterized SQL was right there!

We have all of the tools to prevent these agentic security vulnerabilities, but just like with SQL injection too many people just don't care. There's a race on, and security always loses when there's a race.

The greatest irony is that this time the race was started by the one organization expressly founded with security/alignment/openness in mind, OpenAI, who immediately gave up their mission in favor of power and money.
by hakanderyal | 2026-01-14 21:19:05+00:00
Solving this probably requires a new breakthrough or maybe even a new architecture. All the billions of dollars haven't solved it yet. Lethal trifecta [0] should be a required reading for AI usage in info critical spaces.

[0]: https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/
by wood_spirit | 2026-01-14 21:19:08+00:00
There is one turbine near where I live in Scandinavia that is very noisy. It is a low thumping sound that penetrates houses and is horrid. Those living within a km perhaps more won a court case to remove it but the owner has appealed and appealed and during the years or appeals the thing keeps turning and keeps being noisy so people can’t sleep. My understanding is the simulation and calculations of the noise that were part of the planning process were flawed and did not accurately model the terrain.

Meanwhile, not 5 km away, there are a bunch of turbines with people living around them and no problem.

So the exact slopes etc of the terrain is very important.
by Shocka1 | 2026-01-14 21:19:16+00:00
Interestingly, in all my volunteering experience with the homeless and also hurricane relief in Tennessee/North Carolina, there were many conservatives there helping alongside us, in many instances most of of them - assuming so as they were from Christian churches and organizations. This is an anecdote of course, so please correct me if you have actual statistics that prove conservatives are incapable of empathy.

My theory is that there are a whole lot of really good people in the middle, with the extremes on each end having some brain issues with empathy and whatnot. To cast such a wide blanket on conservatives doesn't seem like critical thinking to me and will not help anything.
by newswangerd | 2026-01-14 21:19:49+00:00
At the moment pretty much everything automatically resets at midnight, including any timers. It's not an issue for me since I rarely stay up past midnight, but I did notice one problem where my step goal reset on New Years eve and I wasn't able to watch my sleep videos on youtube because of it, so I'd like to find a way to make this more configurable.
by _nickwhite | 2026-01-14 21:19:52+00:00
It's also weird that some people here in the office on Verizon work fine, and others are on SOS. No correlation between phone versions or hardware that I could deduce. I also see the same on X: https://x.com/CPTholen/status/2011520566159982758

It came up for around 5-10 minutes at 15:00 EST, but is currently still down.
by buildsjets | 2026-01-14 21:20:04+00:00
Toilet paper math is the hardest kind of math. According to the print on various different packages of Charmin, and I could not make this up:

12 Mega Plus rolls = 54 Regular rolls

30 Double Plus rolls = 68 Regular rolls

12 Super Mega rolls = 72 Regular rolls

18 Mega rolls = 72 Regular rolls usually, but sometimes are sold as "Bonus Mega = 82 Regular rolls"
by Tiereven | 2026-01-14 21:20:08+00:00
Maybe the problem isn't the teens. Bullying is bullying no matter where it happens.

Profiting via dark patterns is despicable, whether it's preying on teens or the elderly. How many elderly people are fed distorted, sensational news and believe it wholesale? At least our teens have learned to be skeptics.

Instead of punishing the innocent to gatekeep a system that is one of the most important innovations in history, maybe we should focus on the root cause: the crappified, ad-based internet that glorifies "clicks" above all else.

We might have to face the fact that "free" accounts have become too expensive. If the cost of a free internet is a business model that monetizes outrage and addiction, it's not working. I don't love the idea of paid-only access or enforced identity, but applying a single standard to everyone might be better than what we have now.

I still believe in the free internet, and I know what I want to do to build it: Make excellent content. Teach good things.

I want to prove the value of an open and positive system.
by phatfish | 2026-01-14 21:20:36+00:00
A digital ID, like someone said below. But people (in the UK at least) go mental about that, despite the government already having all the information anyway. Creating a easy way to securely share that information with a 3rd party for online verification is apparently the work of the devil.

In the real world you turn up in person with a passport, or maybe use snail mail as a way to verify an address which is hard to fake.

Online we have to pretend it is still the internet of the 90s where it's all just chill people having a fun time using their handle...
by NewsaHackO | 2026-01-14 21:20:47+00:00
Yes, but they definitely have a vested interest in scaring people into buying their product to protect themselves from an attack. For instance, this attack requires 1) the victim to allow claude to access a folder with confidential information (which they explicitly tell you not to do), and 2) for the attacker to convince them to upload a random docx as a skills file in docx, which has the "prompt injection" as an invisible line. However, the prompt injection text becomes visible to the user when it is output to the chat in markdown. Also, the attacker has to use their own API key to exfiltrate the data, which would identify the attacker. In addition, it only works on an old version of Haiku. I guess prompt armour needs the sales, though.
by SideburnsOfDoom | 2026-01-14 21:20:54+00:00
For instance Frontier (1) or Eternal (2)

I get Kate Bush and Dead Can Dance vibes, filtered through a mechanical chorus with a bit of glitched breakbeats.

It's empathically not the forgettable, bland averaged pastiches that LLMS emit on lazy command. Even if it's not your favourite, I'm sure that it's something.

1) https://www.youtube.com/watch?v=rvNqNgHAEys

2) https://www.youtube.com/watch?v=r4sROgbaeOs
by quietbritishjim | 2026-01-14 21:21:00+00:00
> There is also a conflict of interest for many in the tech space who browse this forum. Many of the technologies we work on are being abused by this administration.

Possibly true. Just irrelevant.

I already have far too much exposure to Trump, and I'm not even American. I'd like it not to come up here. You may disagree, and that's fine, but the original question was - why are stories about him flagged. I maintain that the answer, for many people if not nearly all, is simple: ugh, not again.
by sroussey | 2026-01-14 21:21:08+00:00
> Is that more absurd than the Hezbollah pager bombings? I don't think so.

OMG, get serious. DJI can't blow up the drones. It is in my closet, not my pocket.

Again, this is just silly. Even for James Bond! ;p

It is more "We have to do something!!" that reminds me of cities in California having moratoriums on building new housing -- who would have thought that people would want to build in order to live in a nice climate. But really was about a new kind of neighbor...
by quux | 2026-01-14 21:21:12+00:00
There's a few threads about this in the Swift forums, here's a couple:

https://forums.swift.org/t/ladybird-browser-and-swift-garbag...

https://forums.swift.org/t/ladybird-browser-event-loop-integ...

https://forums.swift.org/t/ladybird-gc-and-imported-class-hi...
by LeifCarrotson | 2026-01-14 21:21:17+00:00
The amount of detergent per load is set by the manufacturer, who can injection mold that measuring cup in whatever size they want. FTA:

> The amount of liquid had shrunk to 92 ounces from 100 ounces before the pandemic, and the price had risen by a dollar. After that, the cost stayed the same, but the contents shrank to 84 ounces in 2024 and then to 80 ounces in December.

> The label continuously promised enough detergent for 64 loads of laundry.

> ...Tide specifically got the "most significant upgrade to its liquid formula in over 20 years," according to the company, with a "boosted" level of active cleaning ingredients and updated dosage instructions.

> "The result is superior cleaning performance in a smaller dose," a Procter & Gamble representative said.

Do you take them at their word for that? I'm specifically wondering whether the 84 ounce, 64-load bottle with a cap that measures out 1.3125 ounces per load contains the exact same liquid as the 80 ounce, 64-load bottle with a cap that measures out 1.25 ounces per load. I prefer powder detergent with a prewash dose, I know my clothes get clean, but I don't know that anyone outside a lab would be able to inspect clothes post-wash and notice the difference in cleanliness caused by the removal of 0.0625 ounces of detergent.

They have three ways to protect or boost profits: Raise prices, decrease quantities, or decrease quality. NPR and the
by stickfigure | 2026-01-14 21:21:57+00:00
> The new hire appears to have been hired just purely because of the colour of his skin

It's explicitly stated. But isn't that the whole Dilbert schtick? The PHB is not supposed to be good. He represents the stupid side of Corporate America. And then when the black guy says "I identify as white", Corporate America doubles down on the stupidity.

"implies they've never hired..." seems to be reading an awful lot into it.