MurphyA/hacker-news huggingface dataset:
by akersten | 2026-01-09 06:50:52+00:00
It's messy because media impersonation has been a problem since the advent of communication. In the extreme, we're sort of asking "should we make lying illegal?"

The model (pardon) in my mind is like this:

* The forger of the banknote is punished, not the maker of the quill

* The author of the libelous pamphlet is punished, not the maker of the press

* The creep pasting heads onto scandalous bodies is punished, not the author of Photoshop

In this world view, how do we handle users of the magic bag of math? We've scarcely thought before that a tool should police its own use. Maybe, we can say, because it's too easy to do bad things with, it's crossed some nebulous line. But it's hard to argue for that on principle, as it doesn't sit consistently with the more tangible and well-trodden examples.

With respect to the above, all the harms are clearly articulated in the law as specific crimes (forgery, libel, defamation). The square I can't circle with proposals like the one under discussion is that they open the door for authors of tools to be responsible for whatever arbitrary and undiscovered harms await from some unknown future use of their work. That seems like a regressive way of crafting law.
by SeanAnderson | 2026-01-09 06:51:24+00:00
I got hacked late last year. It sucked. Do not recommend.

I'm not going to blog about it, but will at least share how I messed up. Maybe it'll help someone else.

I was phished through Discord. A CEO that I was friends with was phished prior to me and I let my guard down when someone I put on a pedestal reached out to me. The hacker asked me to review a video game prototype they'd been tinkering with in their spare time (the CEO worked in the video game industry) and they came to me because they knew I'd give them "honest feedback." The game's website looked legit enough with AI generated screenshots and boilerplate text.

They also messaged me right around dinner. I had like ten minutes of downtime when the message came in and I immediately shifted to, "Yeah I can bang this request out real quick for a person important to me before dinner arrives." rather than keeping my guard up.

Additionally, I have (or had) two Google accounts. My primary email address is much older and wasn't very business-professional. Over 15 years ago I created a secondary email, that was just my name at gmail, configured it to forward all emails to my first account, and then never logged in to that account again. Naturally, that meant that my primary account had 2FA, but my secondary account did not.

I signed up for Discord using my secondary Google account. So, when I got phished, the hacker assumed that was my primary account and compromised it first.

The way they compromised the account was very quick and efficient. They immediately set parental controls on the account, listed an email address they controlled as the parent, and then changed the accounts age to under 13. Those actions 100% lock an account because all account recovery options must be approved by the parent for children under 13.

Surprisingly, I did get a security notification saying that a suspicion session had been started on my primary email account even through 2FA. I (thankfully) managed to kick the hacker out before they were able to do the same to me. I'm not sure how they got access to the second account.

Laughably, the hacker tried to extort me for only $400 and, when they didn't get it, they pivoted to sending threatening texts then moved on to trying to phish others for quick cash.

Thankfully, I didn't lose much. I lost access to my Discord account and to my Google account, but all my Google data was replicated. I lost a full nights sleep resetting all my passwords everywhere. And I still feel a bit violated and think I always will.

It was really interesting being motivated to interface with the security processes of several hundred companies. Shout out to Kraken and Etsy for having the best security procedures.

Anyway. Just wanted to highlight a scenario which happened. I'm in engineering leadership. I've worked on a computer every day for over 20 years. I use KeePass to store my passwords and generally have fine security hygiene. I do my KnowBe4 training modules, lol.
by computerex | 2026-01-09 06:51:27+00:00
I think some of the commenters are missing the point of this article. Claude Code is a low level harness around the model. Low level thin wrappers are unreasonably effective at code editing. My takeaway is that imagine how good code editing systems will be once our tools are not merely wrappers around the model. Once we have tall vertical systems that use engineering+llms to solve big chunks of problems. I could imagine certain classes of software being "solved".

Imagine a SDK that's dedicated to customizing tools like claude code/cursor cli to produce a class of software like b2b enterprise saas. Within the bounds of the domain(s) modeled these vertical systems would ultimately even crush the capabilities of thin low level wrappers we have today.
by yoavm | 2026-01-09 06:52:05+00:00
Do you have an example? I've studied quite a bit of Hertzel and what I mainly remember repeated to us is "We shall never discriminate between one man and another; We shall never ask 'what is your religion?' nor 'what is your race?'. For us it is enough that he is a human being." and "My will to the People of Israel: create your country in such a way, that the non-Jew will feel good to be your neighbour".
by stein1946 | 2026-01-09 06:52:43+00:00
> Don't give your "smart" TV internet access. It's that simple.

No it's not.

Am I supposed to counter every action taken by a conglomerate against me every time?

Do all the consumers have to align to this as well?

a TV must be a TV, in the same sense that orange juice must be made from oranges.

Looking forward to EU reining in on them.
by defrost | 2026-01-09 06:53:06+00:00
Seems overstated and contrived to use 'all land'.

Antarctica is Earth's southernmost and least-populated continent.

Situated almost entirely south of the Antarctic Circle and surrounded by the Southern Ocean [ and ] is the fifth-largest continent, being about 40% larger than Europe, and has an area of 14,200,000 km2 (5,500,000 sq mi).

~ https://en.wikipedia.org/wiki/Antarctica

There was no one to "take it from" and when it was divided up by "Great powers" that was more by competition (race to open routes) and some notion of good sport:

Antarctica was claimed by several states since the 16th century, culminating in a territorial competition in the first half of the 20th century when its interior was explored and the first Antarctic camps and bases were set up.

~ https://en.wikipedia.org/wiki/Colonization_of_Antarctica

Then there are the more remote parts of Australia, nominally "taken" by the English (despite not being reached for some time) and later returned (post Mabo) to the descendants of what seems likely to be first settlers some tens of thousands of years past (the multiple waves of settlement arguments and other aspects of the History Wars in the Black Armband / Quadrant circles are looking thin in these days of genetic markers).

But that one's a complex can of worms that takes some time to unpack.
by mopsi | 2026-01-09 06:53:16+00:00
> That is where we Indians got lucky. Our founding leaders were smart enough to realise that India joining NATO would lead to China and / or Russia becoming our enemy or India forming a military alliance with Russia would make the west our enemy. And thus, we told them both bluntly that we wouldn't join any alliance against both, because we understood that you all are superpowers. So leave us alone.

This is exactly the pursuit of neutrality that Ukraine chose, except that Russia degenerated into a totalitarian dictatorship that became expansionist as it radcalized and began violating Ukraine's sovereign territory. The first major incident occurred in 2003 over Tuzla island. The "leave us alone" part didn't work out.

> My advise to the Ukrainians would be stop fighting a war they cannot win, surrender and get the best deal you can from Russia to have peace. And then rebuild your country.

Russia is not offering any deals other than the wholesale destruction of the Ukrainian state and ethnicity. The choice is between taking a chance on the battlefield or voluntarily exposing oneself to genocide. Thus, support for continuing the war remains high.
by blackfawn | 2026-01-09 06:54:23+00:00
Chromium and those based off it (Chrome, Brave, etc.) seem to have already implemented this recently on the "new tab" button. I'm so used to highlighting a link or text I want to search for and middle-clicking the new tab button to open that link or search for the text and now as of some recent update, it no longer works. I keep trying by habit and muttering when I remember it's suddenly broken. I didn't see any option in settings nor much info when I searched.
by rvba | 2026-01-09 06:55:42+00:00
Mozilla the one which:

* lost market share of its product from 30 to 2%

* spends money on fun projects and acqusitions that generate no revenue, while taking away what the users wanted (addons, extensions, customizing) since supposedly this is hard to do

* spends money on politics instead of core product

And many more

You should read a business book too.
Focusing on core product (firefox) should be top priority, especially if it is the only real product that generates revenue.

Soon music will stop and there will be no money, since it got spent on everything else.
by geraldog | 2026-01-09 06:57:20+00:00
You know kids, in the 80s, a lot of time before the First Crypto Wars, we had something called the Porn Wars on American Congress. I could leave out many depositions to Congress on Youtube, but I will leave you with some good music.

(shill)

https://www.youtube.com/watch?v=2HMsveLMdds

Which is of course the European Version, not the evil American Version.
by anon7000 | 2026-01-09 06:57:35+00:00
No, it does need help at the publishing side. Most places I know are not updating by default. Everything has a lock file. But the nx attack a few months ago happened because the VS Code extension for nx was always ran the @latest version to check for updates or something like that.

So yeah… people will always have these workflows which are either stupid or don’t have an easy way to use a lock file. So I’d sure as hell like npm to also take some steps to secure things better.

As far as I know, using a lock file with npm install is both the default behavior and also doesn’t randomly updates things unless you ask it to… though it’s definitely best practice to pin dependencies too
by wombatpm | 2026-01-09 06:57:36+00:00
The USPS is in year 4 of a 10 year overhaul of its infrastructure. New facilities with new equipment optimized for the current mail mix. Magazines and catalogs used to be huge. Now they are a fraction of their volume. First class letter volume is crashing as everyone goes paperless.

Where there use to be separate facilities for processing first class, bulk mail, and packages; the new facilities deal with everything. And where the old system of 50 NDC (National Distribution Centers) are being consolidated to ~30 RPDC (Regional Processing and Distribution Centers) leading to a whole new strategy of how mail moves East to West and West to East. And mail sorting for delivery used to happen by mail carriers at local Post Offices, is now happening at LSDC (Local Sorting and Delivery Centers) set up service all mail carriers in a 50 - 70 mile radius.

And all of these changes are happening while still having to deliver mail (It never stops Jerry. It just keeps coming and coming)

So if you’re in the Midwest like Chicago, stuff coming from the Midwest or Eastcoast has been getting stuck in Indianapolis-taking 10 to 15 days. Stuff coming from West Coast gets here in 5.

There are 42,000 active zip codes and 640,000 employees. Making changes to that organization is hard and takes time.

What’s really cool is the work going on with Amazon, Walmart, Target and others for them to deliver packages directly to LSDC for same day delivery. Once you get away from the cities, no one can compare with the USPS for last mile delivery.

TLDR USPS is changing. Things may get worse before they get better.
by todaycompanies | 2026-01-09 06:57:58+00:00
Hey HN,
I built WorkZoneSpeedingTicket.com to solve a specific problem: automated work zone speed cameras are popping up everywhere (NY, CA, PA, etc.), and the fines (~$50-$100) are in that awkward "too cheap to hire a lawyer, but too expensive to just roll over and pay" range.
The Problem: States are rolling out automated enforcement in construction zones. Often, the signage is non-compliant, or the "work zone" is inactive, but the cameras issue tickets anyway. Disputing them manually is a hassle designed to make you pay.
The Solution: I built a tool that takes your ticket details and generates a jurisdiction-specific dispute letter citing relevant vehicle codes (e.g., California Vehicle Code or NY VTL).
How it works:
User inputs ticket info.
AI cross-references the location/time against state-specific defense templates (signage distance, equipment calibration requirements).
Generates a PDF dispute letter.
(Coming soon) We automate the certified mailing via the Lob API so you don't have to go to the post office.
The goal is to democratize access to legal disputes for low-level infractions. I used Lovable to spin up the frontend quickly and am refining the backend logic now.
I’d love feedback on the flow or if anyone knows specific state statutes I should add to the database next.
by iosguyryan | 2026-01-09 06:58:04+00:00
For an academic coffee paper, it is better than many.

A common sin remains: like most coffee papers, I was unable to find calibration procedures in the methods or supplementary sections for the espresso brewing instrument whose performance may vary between runs, days, or users. In this case, they claim/assume "The Opera allows for precise control of shot time, water pressure (PW), and temperature"). As a Decent owner, I'm less familiar with the Opera, but for either machine I would want to disprove any confounding variables by attaching independent sensors. Decent has openly discussed hurdles they've confronted for consistency and accurate measurement.

Their main takeaways, though, are interesting and track with how many now prefer to extract:

As we demonstrated in Figure 3, our model informs us that a reduction in dry coffee mass results in an increased EYmax (shown schematically in blue in Figure 6). Thus, a barista is able to achieve highly reproducible espresso with the same EY as the 20 g espresso by reducing the coffee mass to 15 g and counter-intuitively grinding much coarser (as shown in red, Figure 6B). This modification may result in very fast shots (<15 s), a reduction in espresso concentration, and a different flavor profile.

...

Beyond sensory science studies, a persistent difficulty is that there is no rapid route
to assessing the quality of two identical EYs made with different grind settings or
brew parameters. It is clear that espresso made at 22% EY in the partially clogged
regime tastes more ‘‘complex’’ than a fast 22% EY obtained using the optimization
routine presented in Figure 6. In an attempt to recover the same flavor profile as
the partially clogged flow regime, a shot must contain a mixture of higher and lower
extractions. Consider the tasty point in Figure 7: One can approximate its flavor pro-
file by blending two shots: (1) a low extraction/high dose (purple point) and (2) a high
extraction/low dose (green point). This procedure can more economically yield a
shot with a flavor profile that should approximate that which was previously only
obtainable in an economically inefficient partially clogged shot. Blending shots
does double the total volume of the beverage, and the procedure comes with the
added combinatorial complexity associated with calibrating two shots that, when
mixed together, yield superior flavor. We expect only the most enthusiastic practi-
tioners would consider this approach, but it may well be actionable in an industrial
setting where extraction is carried out in bulk.
by teiferer | 2026-01-09 07:00:24+00:00
And ironically, after going on and on about all the details of those failures, he asks the reader for a job. Does he really think that this overly long text is a good ad for getting people to hire him?

As a potential employer, I already see in front of me the public ranting about what is wrong with my organisation if (or when) he eventually leaves again. Dodged a bullet right there.
by poisonarena | 2026-01-09 07:00:51+00:00
Agreed, been this way for 30 years, and significant amount of effort by him and warp have been adding to cult of his mystique(actually many electronic music artists in the 90s/early 2000s). He is one of the last popular electronic musicians younger generations of "#DAWLESS" guys like now because he kept up that mystique which is basically impossible to have now in the current social media era.

I remember buying some of his tapes and cd's from Amoeba music in 1999 and the feeling they gave me. I often wonder what its like to been born in 2010 and never experiencing this.
by anonzzzies | 2026-01-09 07:01:33+00:00
For the bizarre amount of work that gets done for that 180 euro, it is really cheap. We are just getting used to it and sinking prices everywhere, it is just that CC is the best (might be taste or bias, I at least think so), so we are staying with it for now. If it gets more expensive, we will go and try others for production instead of just trying them to get a feel for the competition as we do now.
by Joel_Mckay | 2026-01-09 07:01:46+00:00
The studios did already rip off Mark Hamill of all people.

Arguing regulatory capture versus overt piracy is a ridiculous premise. The "AI" firms have so much liquid capital now... they could pay the fines indefinitely in districts that constrain damages, and already settled with larger copyright holders like it was just another nuisance fee. =3
by jedwhite | 2026-01-09 07:01:50+00:00
Most of the cloud providers give you a choice of two ways of referring to models - either a specific dated model id (like the example above), or a shorter alias which generally points to the latest release of that model, and is more likely to change over time.

We add in some additional flags for `--opus`, `--sonnet`, `--haiku` as shortcuts to abstract this away even further if you want to just use the latest model releases.

Example to run haiku latest via Vercel AI Gateway with unified billing and cross-cloud fallback between providers.

`claude-run task.md --haiku --vercel`

AWS Bedrock at least appears to be pretty steady when you pin a model now, according to our own evals anyway. Earlier on there was some performance degradation, at peak load etc.
by RagnarD | 2026-01-09 07:02:13+00:00
This feels like a pretty deceptive article title. At the end, he does say:

"What We Built vs. Production Tools
This is about 200 lines. Production tools like Claude Code add:

Better error handling and fallback behaviors
Streaming responses for better UX
Smarter context management (summarizing long files, etc.)
More tools (run commands, search codebase, etc.)
Approval workflows for destructive operations

But the core loop? It’s exactly what we built here. The LLM decides what to do, your code executes it, results flow back. That’s the whole architecture."

But where's the actual test cases of the performance of his little bit of code vs. Claude Code? Is the core of Claude Code really just what he wrote (he boldly asserts 'exactly what we built here')? Where's the empirical proof?
by ehnto | 2026-01-09 07:02:30+00:00
That's not quite the same thing I think, the risk here is that the sources of training information vanishes as well, not necessarily the feedback loop aspect.

For example all the information on the web could be said to be a distillation of human experiences, and often it ended up online due to discussions happening during problem solving. Questions were asked of the humans and they answered with their knowledge from the real world and years of experience.

If no one asks humans anymore, they just ask LLMs, then no new discussions between humans are occurring online and that experience doesn't get syndicated in a way models can train on.

That is essentially the entirety of Stack Overflows existence until now. You can pretty strongly predict that no new software experience will be put into Stack Overflow from now. So what of new programming languages or technologies and all the nuances within them? Docs never have all the answers, so models will simply lack the nuanced information.
by 9rx | 2026-01-09 07:02:33+00:00
> why don't you show and tell?

How do you suggest? A a high level, the biggest problem is the high latency and context switches. It is easy enough to get the AI to do one thing well. But because it takes so long, the only way to derive any real benefit is to have many agents doing many things at the same time. I have not yet figured out how to effectively switch my attention between them. But I wouldn't have any idea how to turn that into a show and tell.
by misternugget | 2026-01-09 07:03:56+00:00
Engineer working on Amp here.

I'm very surprised that it took them this long to crack down on it. It's been against the terms of service from the start. When I asked them back in March last year whether individuals can use the higher rate limits that come with the Claude Code subscription in other applications, that was also a no.

Question is: what changed? New founding round coming up, end of fiscal year, planning for IPO? Do they have to cut losses?

Because the other surprise here is that apparently most people don't know the true cost of tokens and how much money Anthropic is losing with power users of Claude Code.
by hibikir | 2026-01-09 07:04:46+00:00
IMO, the difficulty with your typical business book is practical application: I've spent way too much time over my career trying to explain to leadership at different levels how they were acting in ways opposite to the very books they had on their desks. In one very high profile case, even the book they wrote!

Leadership comes down to Feynman's first principle: You must not fool yourself and you are the easiest person to fool.