MurphyA/hacker-news huggingface dataset:
by pron | 2026-01-12 21:20:33+00:00
This is comparing what Rust has and other languages don't without also doing the opposite. For example, Java doesn't enforce data-race freedom, but its data races are safe, which means you can write algorithms with benign races safely (which are very useful in concurrent programming [1]), while in Rust that requires unsafe. Rust's protection against memory leaks that can cause a panic is also weaker, as is Rust's ability to recover from panics in general. Java is now in the process of eliminating the unsafe escape hatch altogether except for FFI. Rust is nowhere near that. I.e. sometimes safe Rust has guarantees that mean that programs need to rely on unsafe code more so than in other languages, which allows saying that safe Rust is "safer" while it also means that fewer programs are actually written purely in safe Rust. The real challenge is increasing safety without also increasing the number of programs that need to circumvent it or increasing the complexity of the language further.

[1]: A benging race is when multiple tasks/threads can concurrently write to the same address, but you know they will all write the same value.
by taurath | 2026-01-12 21:20:52+00:00
I found work in 2025 with almost every disadvantage other than having experience. The front door is broken unless you have:

* BigTech experience

* BigSchool degree

* Direct experience in a niche domain or interest area

* A degree, and good (5+ yrs) experience that looks modern

You will be passed over on most (not all) direct apps otherwise. The degree part is more important the more non-tech the company is.

Referrals mean a lot, especially for the best jobs that pay well have WLB or are remote. If you’re not pulling everyone you know who might vouch for you, you’re not doing it right.

Practice leetcode + hello interview, as almost every place will have some sort of leetcode round and system design round.
by xlbuttplug2 | 2026-01-12 21:21:30+00:00
> They can and most likely will release something that vaporises the thin moat you have built around their product.

As they should if they're doing most of the heavy lifting.

And it's not just LLM adjacent startups at risk. LLMs have enabled any random person with a claude code subscription to pole vault over your drying up moat over the course of a weekend.
by globular-toast | 2026-01-12 21:21:35+00:00
I always thought Docker/Podman is a bit overkill for this kind of thing. On Linux all you need is Bubblewrap. I did this as soon as I downloaded Claude Code as there was no way I was running it without any kind of sandboxing. I stopped using CC mainly because it's closed source and Codex and OpenCode work just a well. I recently updated the script for OpenCode and can update my blog post if anyone is interested: https://blog.gpkb.org/posts/ai-agent-sandbox/
by vunderba | 2026-01-12 21:21:41+00:00
Yeah that's similar to my approach.

I created a non-admin account on my Mac to use with OpenCode called "agentic-man" (which sounds like the world's least threatening megaman villain) and that seems to give me a fair amount of protection at least in terms of write privileges.

Anyone else doing this?

EDIT: I think it'd be valuable to add a callout in the Github README.md detailing the advantages of the Yolobox approach over a simple limited user account.
by whynotmaybe | 2026-01-12 21:22:10+00:00
A lot of stuff can be handled by developer themselves, but usually some steps are voluntarily blocked, like publishing to Google Play/App store.

You don't want anyone to be able to publish public facing app from their version of the code that might not be committed.

Some of us remember an era where deployment was copy-paste from the local /bin folder to the /bin folder on production server.
by paufernandez | 2026-01-12 21:23:10+00:00
Yeah, but the xz algorithm is also not counted in the bytes... Here the "program" is the LLM, much like your brain remembers things by coding them compressed and then reconstructs them. It is a different type of compression: compression by "understanding", which requires the whole corpus of possible inputs in some representation. The comparison is not fair to classical algorithms yet that's how you can compress a lot more (given a particular language): by having a model of it.
by johnnyanmac | 2026-01-12 21:24:05+00:00
>which is how (say) a coarse 51% victory for a coalition gets frequently and deliberately misrepresented as "the American people" wanting that coalition's unpopular policies.

I think the larger point is "we have 2 bad choices, but we chose the worse one". Because "both sides are the same".

> it's about minority ideological factions jockeying for power to subject the American people to their vision.

Yeah, the current vision unfortunately sucks much worse than status quo neoliberalism, though. But we overall chose that. People ignoring the issues with Trump only reinforces how bad things have gotten.
by malux85 | 2026-01-12 21:24:13+00:00
I use debuggers heavily, I code like Carmack does - I basically live in the debugger. The REPL at breakpoints is already integrated into my IDEs (all of the different ones) for the last 20 years, I couldn’t imagine a debugger without this functionality.

I guess this could be useful if you were cli only and didn’t use an IDE, but it’s not just the REPL that I like, in my IDE when I hit a breakpoint, I can see all local variables, the whole call stack without having to do anything (don’t have to type commands, don’t have to click buttons) - I want to see the entire program state without having to type a bunch of stuff at a REPL, that would slow me down enormously.

For example in the gif when you hit a breakpoint, print the line straight away! Don’t make me type:
print(__line__, __source__) just to see which breakpoint I hit (!)

Also I preview of the variables would be better, in my ide I see a list if all the local variables and all of their values (str, int, float, are just shown, numpy arrays the shape is shown, arrays the first few values are shown and the length) again, all of this without having to type exhaustive print statements into a REPL

Maybe it’s not your focus though, I’m just trying to say what I love about debugger driven development
by eli | 2026-01-12 21:24:14+00:00
I don't think those are all equivalent. It's not plausible to have an antivirus that protects against unknown viruses. It's necessarily reactive.

But you could totally have a tool that lets you use Claude to interrogate and organize local documents but inside a firewalled sandbox that is only able to connect to the official API.

Or like how FIDO2 and passkeys make it so we don't really have to worry about users typing their password into a lookalike page on a phishing domain.
by Scaevolus | 2026-01-12 21:24:41+00:00
When LLMs predict the next token, they actually produce a distribution of the probability of each of the possible next tokens, and the sampler chooses one of them, and not necessarily the most likely one!

If instead you run LLM prediction and then encode the probability of the next token of the input text you want to encode (from the cumulative distribution, a number in [0, 1]) using arithmetic coding, you can run the same operation in reverse to achieve lossless compression.

The tricky part is ensuring that your LLM executes absolutely deterministically, because you need to make sure that the encoder and decoder have the same probability distribution map at each step.
by andreyf | 2026-01-12 21:24:50+00:00
Rumor has it that they weren't trained "from scratch" the was US would, i.e. Chinese labs benefitted from government "procured" IP (the US $B models) in order to train their $M models. Also understand there to be real innovation in the many-MoE architecture on top of that. Would love to hear a more technical understanding from someone who does more than repeat rumors, though.
by capanno | 2026-01-12 21:25:05+00:00
Are you building event-driven systems on AWS? Testing them can be challenging. After experiencing these difficulties firsthand, I created Flurry, a testing toolset that orchestrates requests and data from async callbacks and event streams, enabling you to run assertions on asynchronous processes. I'm offering free access to anyone who could benefit from it during active development. DM me on X: @flurrytest
by Nextgrid | 2026-01-12 21:25:30+00:00
Actually yes one thing I didn't consider in my calculation is the fridge (mostly because it's a spiky load that rarely comes on and I based it off my own apartment's instantaneous consumption at the time which was ~100W since the fridge compressor wasn't running).

Indeed with the fridge it pushes it a bit. But to address some of your other points:

> it would probably need to cool the battery

I'd expect if you're in a storm then you probably don't need any cooling - not to mention a 300W load is nothing for an EV battery compared to actually moving the vehicle. I'd expect some computers in the vehicle to be alive but that should be a ~10-20W draw.

On the other hand, my calculation assumes ~300W continuous. I expect the consumption to lean into the evenings due to the extra lighting, and drop off during other times.

But yes 80kWh might very well be what the OP has; I intentionally picked 50kWh as the lowest option I found on a "<major ev brand> battery kwh" search.
by Gracana | 2026-01-12 21:25:39+00:00
I'm also a fan of that sort of setup. A Fractal Meshify 2 XL will fit a bunch of 140mm fans, or you can get the Torrent which is smaller but has 2x 180mm fans up front. I have both and would recommend them, though the Torrent is a tight fit for a big board, and the shield on the back of the Asus W790 motherboards interferes with the cable routing grommets on the motherboard tray, so you have to remove them.
by Edmond | 2026-01-12 21:25:42+00:00
If the hammer ever comes down on this issue, ie hardcore requirement for age verification, there are ways to do this while protecting privacy.

We are experimenting with bootstraping a PKI certificate trust chain for facilitating trust projection and information verification online. Think of it as the ability to do things like age verification at scale via a peer-2-peer ish mechanism instead of sending your government id to a service provider.

One experiment is with PGP key holders (for now Keybase key holders) as CAs:

https://news.ycombinator.com/item?id=46576590

And also .gov email holders:

https://blog.certisfy.com/2025/12/using-gov-email-addresses-...

It's all self-service and requires no sign-up or download of anything, the app (https://certisfy.com/app) is an in-browser app and all the cryptography happens in the browser.
by make3 | 2026-01-12 21:26:02+00:00
There's no way there's enough data for you to get a model that is anywhere as strong as mainstream languages.

If your model is struggling with parentheses, that means it's not even the level of GPT-3 for a mainstream language.

It's not completely impossible with in-context learning I guess, but it will still be much weaker than .. eg all of GitHub and more on Python
by sgwizdak | 2026-01-12 21:26:43+00:00
Sorry - I think there's complexity with insulin at play that you're overlooking. When I did caloric restriction, I was constantly battling hypoglycemic events that made me not want to exercise. I don't get that with the GLP-1s. In online discussions, people tend to conflate GLP-1 with appetite suppressants - but there's also insulin stabilization that occurs.
by arjie | 2026-01-12 21:26:54+00:00
This is incredible. Coincidentally, I've just started using Claude Code to model things using OpenSCAD and it's pretty decent. The fact that it can generate preview PNGs, inspect them, and then cycle back to continue iterating is pretty valuable. But the things I make are pretty simple.

My wife was designing a spring-loaded model that fits in our baby walls so that we can make it more modularly attached to our walls and she used Blender. Part of it is that it's harder to make a slightly more complex model with an LLM.

Solidworks is out of our budget for the kind of things we're building but I'm hoping if this stuff is successful, people work on things down the market. Good luck!
by mcpeepants | 2026-01-12 21:26:57+00:00
> hyper-malleable control surface [...] (the stream deck is popular for a reason!).

I agree with the sentiment - making a control surface that adapts to the user's current task makes total sense to me, and is a compelling feature in theory.

The execution (and how the touchbar differs from the Stream Deck) is where I think the argument falls apart. There is effectively zero ability to navigate the touchbar without using your eyes and taking your focus off the display, and your work. The Stream Deck can easily be used without looking. A static grid of real buttons whose function changes within context is a more useful implementation in the real world, even though it is technically _less_ capable.

IMO the touchbar concept is flawed in exactly in the same way as the modern car user interface.
by zmmmmm | 2026-01-12 21:27:04+00:00
This is pretty egregious. And outside the fact the server is now disabled by default, once it's running it is still egregious:

> When server is enabled, any web page served from localhost/127.0.0.1 can execute code

> When server is enabled, any local process can execute code without authentication

> No indication when server is running (users may be unaware of exposure)

I'm sorry this is horrible. I really want there to be a good actual open cross-provider agentic coding tool, but this seems to me to be abusive of people's trust of TUI apps - part of the reason we trust them is they typically DON'T do stuff like this.
by zurfer | 2026-01-12 21:27:24+00:00
I'm a bit shocked to see so many negative comments here on HN. Yes, there are security risks and all but honestly this is the future. It's a great amplifier for hackers and people who want to get stuff done.

It took some training but I'm now starting almost all tasks with claude code: need to fill out some word document, organize my mail inbox, write code, migrate blog posts from one system to another, clean up my computer...

It's not perfect perfect, but I'm having fun and I know I'm getting a lot of things done that I would not have dared to try previously.
by cmxch | 2026-01-12 21:27:24+00:00
Except that the UK is just laundering authoritarianism through a clause that selectively harms one organization and not all of those that have platforms with the same problem.

Given the UK’s already high authoritarian tendencies towards speech codes, it would be better to have the US sanction Kier Starmer, OFCOM, and other associated parties in the Commonwealth, narrowly specified.
by al_borland | 2026-01-12 21:28:03+00:00
This is something it is actually able to do. I would like it to be more of a standard feature on monitors and TVs. When it came out it seemed like a unicorn, it still kind of does.

It's an LG 43UD79-B. According to LG's site[0], it's discontinued. I got it from Costco in 2017 for $550, but it was sold many places at the time.

Doing a quick glance at LG's current lineup, there isn't an obvious successor.

It looks like Amazon has 1 person selling it used[1], but in 6/10 condition and no remote, for double the price of new... While it looks the remote is also being sold places, it's pretty useless without the remote. The seller has sketchy ratings as well, I'd stay away.

[0] https://www.lg.com/us/monitors/lg-43UD79-B-4k-uhd-led-monito...

[1] https://www.amazon.com/LG-Electronics-LED-lit-Monitor-43UD79...
by ndiddy | 2026-01-12 21:28:15+00:00
If anyone would like any further reading about the intersection between brutality and extreme incompetence, I recommend this article about Ethiopian flight 961, where a group hijacked a regional flight from Ethiopia to Kenya and tried to divert it to Australia. https://admiralcloudberg.medium.com/the-dead-mans-gambit-the...

> For the approximately two hour flight to Nairobi, the crew had uplifted only about three and a half hours of fuel, which would not get them even half way to Australia. Leul attempted to explain that they would have to stop for more fuel before he could comply with the hijackers’ request, perhaps in Mombasa, Kenya, but to his surprise, they refused to believe him. Instead, one of the hijackers retrieved a copy of the Ethiopian Airlines in-flight magazine “Selamta,” which contained specifications for the company’s Boeing 767s, and pointed out that according to the publication, the 767–200ER could stay in the air for up to 11 hours. Leul spent a considerable amount of time trying to explain that the 11-hour figure is only achievable with a full fuel load, and he attempted to demonstrate using the fuel quantity indicating system, with a comparison between their actual fuel load and what an 11-hour fuel load ought to look like. And yet, despite his conscientious and respectful efforts, the hijackers remained convinced that he was bluffing — that his proposal to stop for fuel in Mombasa was in fact a trap to hand them over to the authorities. If he didn’t fly directly to Australia, they insisted, they would blow up the plane and everyone in it.
by Veserv | 2026-01-12 21:28:15+00:00
Does not look like it [1]. It appears to be a protocol that enumerates your exact path, interface by interface, on every data packet. So you can just blindly forward to the next hop written in the packet itself.

By my guess, a competent and efficient implementation should be able to run the routing logic at ~30-100 million packets per second per core. That would be ~300-1,000 Gb/s per core, so you would bottleneck on your memory bandwidth if you have even a single copy.

[1] https://www.ietf.org/archive/id/draft-dekater-scion-dataplan...
by dfxm12 | 2026-01-12 21:28:43+00:00
Trump campaigned on "No new wars", but given Trump's history in his first term, his party's history in general, you'd have to have be a rube to believe this. Also why does this earn Trump a vote when his opposition was also running on the status quo in this regard, especially the considering the historical US uniparty approach to foreign affairs?

But, go ahead, set that aside. You think that is a worthwhile tradeoff for Trump sending federal agents to gun down his political enemies (US citizens who hurt their feelings)?
by johnnyanmac | 2026-01-12 21:28:44+00:00
>There's a world outside the US

Cool, I'm all for everyone else banning X. But sadly it's a US company subject to US laws.

I'm just explaining why anyone in the US who would take legal action may have trouble without making the above distinction

Definitely a core weakness of the Constitution. One that assumed a lot of good faith in its people.
by jacquesnadeau | 2026-01-12 21:29:35+00:00
I'm one of the creators of shai. Thanks for the callout!

Interesting to see the work on Yolobox and in this space generally.

The pattern we've seen as agent use grows is being thoughtful about what different agents get access to. One needs to start setting guardrails. Agents will break all kind of normal boundaries to try to satisfy the user. Sometimes that is useful. Sometimes it's problematic. (For example, most devs have a bunch of credentials in their local env. One wants to be careful of which of those agents can use to do things).

For rw of current directory, shai allows that via `shai -rw .` For starting as an alternative user, `shai -u root`.

Shai definitely does have the attitude that you have to opt into access as opposed to allowing by default. One of the things we try to focus on is composability: different contexts likely need different resources and shai's config. The expectation is .shai/config.yaml is something committed to the repo and shared across developers.
by klondike_klive | 2026-01-12 21:29:48+00:00
I second the Yoto. My son and I have had much fun making our own cards and I got pretty good at extracting audiobooks from YouTube, processing them with audacity and making cards of book series that he was into. You can fit a staggering amount onto a single card (5hrs of audio if memory serves).

Honestly that was the biggest extra feature for us, we quickly exhausted all the Yoto store content that appealed, and weren't into any of the big franchise content (except a pleasantly surprising read of Pixar's "Cars") or joining the Yoto club.
by GuinansEyebrows | 2026-01-12 21:29:54+00:00
> I've not seen Rings of Power and I don't plan to

i say this as a die hard Tolkien fan, having read (most of) HOME: i enjoyed Rings of Power quite a lot and i'd recommend it to anyone who enjoys the extended world of middle earth. the casting is great, i actually did enjoy the picking at the question of orcish morality, and because amazon was willing to throw millions at it, it looks fantastic for a tv show.

it doesn't follow canon (some weird squashing of timelines re: ringmaking, the akallabeth etc) which seems to upset a lot of geeks. however, one thing to keep in mind when interacting with extended works based on Middle Earth is that Tolkien didn't necessarily set out to codify everything perfectly (and what was there was definitely the result of his obsession and great care for the world he built). one of his stated desires in writing LOTR was to establish a modern mythology that other people could write/create within, so the fiction could take a life of its own. maybe he wouldn't always like the ways people built on his work, but that's the risk he took when he explicitly set out to invent a mythology for others to interact with.

we're still going to ignore the hobbit movie trilogy, though.
by jpcompartir | 2026-01-12 21:30:01+00:00
I've been working with a claude-specific directory in Claude Code for non-coding work (and the odd bit of coding/documentation stuff) since the first week of Claude Code, or even earlier - I think when filesystem MCP dropped.

It's a very powerful way to work on all kinds of things. V. interested to try co-work when it drops to Plus subscribers.
by BrandoElFollito | 2026-01-12 21:30:08+00:00
Almost all of my backup is around restic, including monitoring of backups (when they fail and when they do not run often enough).

It is a very solid setup, with 3 independent backups: local, nearby and far away.

Now - it took an awful lot of time to set up (including drinking the wrapper to account for everything). This is advanced IT level.

So Time Machine is not for ignorant people, but something everyone can use. (I never used it, no idea if it's good but it has to all last work)
by billti | 2026-01-12 21:30:19+00:00
This is the most disappointing aspect of the slide in quality for me.

I working in software and "build features" for a living, and over the years I've come to prioritize reliability, performance, and an intuitive experience over all else. No matter how good the feature set is, if it crashes, is painfully slow, or I can't figure out how to use it, then I don't want it.

Apple used to have that focus, but seems to have lost it of late.
by dpark | 2026-01-12 21:30:26+00:00
Have any of these sorts of proclamations ever actually come true? I recall when Reddit effectively cut off all the clients from their API, there were similar loud proclamations that they had ruined their business and everyone would defect. I remember something similar with Twitter. These businesses both have their problems, but blocking third-party apps doesn’t seem to be one of them.

I think Anthropic took a look at the market, realized they had a strong position with Claude Code, and decided to capitalize on that rather than joining the race to the bottom and becoming just another option for OpenCode. OpenAI looked at the market and decided the opposite, because they don’t have strong market share with Codex and they would rather undercut Claude, which is a legitimate strategy. Don’t know who wins.

I feel like Anthropic is probably making the right choice here. What do they have to gain by helping competitors undercut them? I don’t think Anthropic wants to be just another model that you could use. They want to be the ecosystem you use to code. Probably better to try to win a profitable market than to try to compete to be the cheapest commodity model.