MurphyA/hacker-news huggingface dataset:
by programjames | 2026-01-15 18:22:39+00:00
My experience at an American university (in the early 2020s) was that the native Americans were much less impressive than the international students, and the professors were mildly annoyed at them compared to previous generations of students they had taught. I think this is a common experience at American universities nowadays—I mean, what else would you expect with the primary/secondary school decline?—but I do not have any hard data to show you. I think you can find a lot of similar anecodotes on r/professors, though it seems to be more of a complain-subreddit than representative of all professors.

I think it is difficult to find data on this, as there are not many international assessments at the university level. You can look at research output, but research is kind of bullshit these days, and even if it weren't, it would be skewed by the older generations. You can look at international competitions, but does America do poorly in the ICPC because they're worse, or because they don't care? Brigham Young University (a small-fry religious school in Utah, USA) got a bronze medal a decade ago, significantly better than their other universities. If you investigate a little further, you'll find this university did decent at the Putnam around the same time, so they probably just had a few students who really tried hard. It's known that MIT dominates the Putnam, but that is now literally a self-fulfilling prophecy. I know many math people who chose MIT above other schools because it is the place Putnam winners go.

One thing you can look at is the graduate body composition. At elite universities, around 40% of graduate students are foreigners (compared to 30% 50 years ago). Across all universities, nearly half of PhDs are awarded to foreigners. However, this does not really prove American undergraduate students are falling behind, and it mildly supports the case that American universities maintain their prestige. I actually believe American universities do still maintain their prestige, just that they are more of a paper tiger than Americans like to believe. Almost like MIT with the Putnam, everyone goes to America because everyone goes to America.

Well, that plus a ton of investor money floating around. The dollar hegemony is still going strong, and while the invasion of Venezuela shows it might be a little weaker than the average American hopes, they're not going to let it go away without a fight.
by queenkjuul | 2026-01-15 18:22:41+00:00
If only this were the whole story, but my Windows gaming desktop has been running more or less without issue (barring hardware failure), no reinstalls, since 2019. I tried so hard to use Linux on my laptop for two years but eventually gave up; i reinstalled Ubuntu three times in those two years.

Now, my Ubuntu server has also been running continuously since 2019. Linux can be that solid for the right use case. I've got a Linux HTPC that's pretty worry free, too.

Linux just legitimately has some hard-if-not-impossible problems on random specific consumer hardware, sadly. Until manufacturers start actually supporting it, that'll always be the case. Manufacturers have gotten better about it too, though, and I'm hoping valve continues making official Linux support more appealing for device manufacturers.

I guess all I'm saying is, some things on Linux still actually just can't be fixed, and every platform is gonna give you a night of extreme frustration from time to time.
by d12frosted | 2026-01-15 18:22:46+00:00
Glad you like it! I was curious to see the comparison myself, so I asked Claude Code to reimplement it with vui.el - wanted concrete numbers and code rather than just claims. The 60% reduction was a pleasant surprise.

Regarding in-buffer forms: I'd love to understand your use case better. When you say "injecting" forms into a buffer while keeping the rest editable - what's the actual workflow you're building? A few scenarios come to mind:

1. Inline editing in org/markdown - e.g., a structured data block that becomes a form when you enter it?
2. Mixed content - documentation with embedded interactive widgets?
3. Progressive disclosure - expand a section into a form, collapse back when done?

Right now vui.el mounts to a dedicated buffer, so it doesn't support inline injection. But depending on the use case, it might not be too complex to add - or there might be a different approach that works better. Would be interested to hear more about what you're trying to build.

(And yes, feeding vui.el to an agent works surprisingly well - that's exactly how the gist was created!)
by shevy-java | 2026-01-15 18:22:47+00:00
Denmark is not alone here and it is also not just due to Trump
threatening to enslave all Greenlanders by military junta force either. That is just part of the military complex being tied to "business" - and happened in the past too, by the way. Trump just makes it "more official".

The whole TechBro mafia structure behind Trump has again and again
threatened damage against Europeans. A good example was Vance trolling
on the security conference in Munich, where he complained how the ultra
right are silenced in Europe. This showed that the new agenda that the
TechBros in the USA do, is actively hostile - this in addition to Trump
acting as agent Krasnov buddy for Putin. So, any more money that goes
into the USA, is ultimately money that goes against Europe. In many ways
Canadians understand this problem MUCH better than many governments in
Europe - just look at the german government. They are absolutely unwilling
to stop being so obedient to the USA. Denmark at the least understands the
problem - why is Germany so strange?
by potato3732842 | 2026-01-15 18:23:01+00:00
>I would bet that's true just on a statistical level - but my point is that plenty of people still feel that way, or at least have felt that way recently enough about the underlying problem that won't cause them to riot.

Exactly. If people you hate are getting in a fight you're staying right there on the porch and that's how a lot of the country feels right now.
by swyx | 2026-01-15 18:23:05+00:00
all DoS attacks and one XSS. this isnt as bad as the react server components CVEs, which enabled RCE.

saving people a click:

CVE-2026-22775: DoS in devalue.parse due to memory/CPU exhaustion

> Effects:
A malicious payload can cause arbitrarily large memory allocation, potentially crashing the process. SvelteKit applications using remote functions are vulnerable, as the parameters are run through devalue.parse
If you don’t have remote functions enabled, SvelteKit is not vulnerable

CVE-2026-22774: DoS in devalue.parse due to memory exhaustion
(Yes, this is very similar to the previous CVE. No, it is not the same!)

> Effects:
A malicious payload can cause arbitrarily large memory allocation, potentially crashing the process
SvelteKit applications using remote functions are vulnerable, as the parameters are run through devalue.parse
If you don’t have remote functions enabled, SvelteKit is not vulnerable

CVE-2026-22803: Memory amplification DoS in Remote Functions binary form deserializer

> Effects:
Users can submit a malicious request that causes your application to hang and allocate arbitrarily-large amounts of memory

CVE-2025-67647: Denial of service and possible SSRF when using prerendering

> Effects:
DoS causes the server process to die
SSRF allows access to internal resources that can be reached without authentication from SvelteKit’s server runtime
If the stars align, it’s possible to obtain SXSS via cache poisoning by forcing a potential CDN to cache an XSS returned by the attacker’s server (the latter being able to specify the cache-control of their choice)

CVE-2025-15265: XSS via hydratable

> Effects:
Your users are vulnerable to XSS if an attacker can manage to get a controlled key into hydratable that is then returned to another user
by ch_123 | 2026-01-15 18:23:36+00:00
> May be better with a native PCI-e or PCI HBA and 700W power supply and a junker ATX Linux machine to provide network shares.

Agreed. Even if it's possible to get a combination of adapters to allow a SCSI interface to be attached to a Mac (and assuming the correct driver support is present), I think getting an old PC and an old SCSI adapter card may be cheaper.
by alpine_accentor | 2026-01-15 18:23:40+00:00
ICE officers are bad at policing because they were a paper pusher/investigative agency which should always be assisted by local law enforcement. Most of the other feds operate like that. The administration dramatically increased ICE workload and in addition to that the local police is not always cooperative, and they are being obstructed by protesters. Of course they are fumbling around and making lots of mistakes, but again, they can not give up on enforcing the federal law.
by _bohm | 2026-01-15 18:23:44+00:00
I don't accept the framing that this is about law enforcement in the first place. I believe that this administration is run by xenophobic right wing extremists who care little for the distinction between legal and illegal immigration. They have weaponized ICE against the Somali community in Minneapolis today, the overwhelming majority of whom are legal refugees. As we have seen, they will not hesitate to weaponize ICE against anyone else who crosses them. I believe the organization does not exist to protect or serve the interests of the American public and should be abolished.
by measydns | 2026-01-15 18:24:02+00:00
Weekly Axis Of Easy #432

Last Week’s Quote was: “Who seeks shall find.” was by Sophocles, no one got it.

This Week’s Quote: “Real knowledge is to know the extent of one’s ignorance.” By ???

THE RULES: No searching up the answer, must be posted at the bottom of this blog post, in the comments section.

The Prize: First person to post the correct answer gets their next domain or hosting renewal on us.

This is your easyDNS #AxisOfEasy Briefing for the week of January 5th, 2026 our Technology Correspondent Joann L Barnes and easyCEO Mark E. Jeftovic send out a short briefing on the state of the ‘net and how it affects your business, security and privacy.

To Listen/watch this podcast edition with commentary and insight from Joey and Len the Lengend, below.

https://youtu.be/FJs__J5lQOY
by dragonwriter | 2026-01-15 18:24:18+00:00
> Whatever ideological differences we may have, need to be shelved. We can bicker about that later. For now, the border of the U.S. exists, and it's killing people.

The ideological differences are, in no small part (directly or implicitly) over whether the border should exist and whether it killing the people it kills is a good or a bad thing. Can’t really just shelve that.
by nine_k | 2026-01-15 18:24:32+00:00
It depends how high you value your headaches, and how high, your org's downtime. Github not working accrues over the hourly rate of every developer affected, which is likely $70-$100 a hour. 10 hours of outage in a year affecting a team of 10 would cost north of $70k, enough to hire a part-time SRE dedicated just to tend to your Gitlab installation.
by array_key_first | 2026-01-15 18:24:46+00:00
Yeah, all those sovereign citizens going to their... doctors appointments? Really? This is how far we're shoving the boot up our ass these days? Okay.

Look. We have so much evidence of misconduct by ICE that the only reasonable thing to do is just assume there is misconduct. There's no Le Enlightened Centrist take here - these people act like gangs, and have zero respect for Americans citizens or their property.
by embedding-shape | 2026-01-15 18:24:51+00:00
> It cannot be understated the role that Fox News has played to get us to this level of division.

Yeah, it's been a sharp shift, as someone who've watched/read Fox News (and other news of course) for decades out of the US. Fox News always been a bit strange with it's vitriol, but at one point, I can't remember if it was around the middle of Obama's second term, or later, but it took a really sharp turn further into emotional reporting and partisanship. Again, Fox always been a bit special, and other news channels also did similar turns further into their sides, but I can remember seeing the change as it was happening.

There is another documentary I quite liked in similar vein but on an individual level, called "Dear Kelly", that follows a far-right conspiracy theorist and tries to give some understanding into Kelly's struggles and radicalization. Released independently and can be found here: https://www.dearkellyfilm.com/
by toast0 | 2026-01-15 18:25:02+00:00
There's a subtle difference. The vehicles in your picture have moved the controls closer to the operator's hips; a little bit rearward, upward, and outward. This is probably a much more comfortable experience, especially for people whose arms are short relative to their torso length.

The wrist position is also rotated 90 degrees which looks a lot more comfortable with arms at sides IMHO.
by miduil | 2026-01-15 18:25:07+00:00
My first "contributions" were 2004, I was 10 years old and supposed to write a text about Mozart. Somehow I noticed the edit button and started vandalizing the page, as I didn't understood what Wikipedia was meant to be. Some patient wikipedian kept reverting and reporting my IP addresses during that day. It's both incredible to see how old and young Wikipedia is, if we'd say there was a "World Wide Web Heritage" project, Wikipedia and the contributors are truly the first thing that comes to mind.

Wonderful website!
Ask HN: One IP, multiple unrealistic locations worldwide hitting my website
by nacho-daddy | 2026-01-15 18:25:36+00:00
Background: I manage an ecommerce website. Recent bot traffic is up. Most traffic can be traced to one or two IP addresses with hundreds of requests per day. These ip addresses don't have DNS records for reverse lookup, and when I map the requests in cloudflare, one address shows up as requesting from different data centers all over the US. What is going on here? Source IP example 173 . 245 . 58 . 0
Chicago, United States (ORD)
340 requests
San Jose, United States (SJC)
330 requests
Los Angeles, United States (LAX)
310 requests
Atlanta, United States (ATL)
310 requests
Dallas-Fort Worth, United States (DFW)
290 requests
Newark, United States (EWR)
280 requests
Washington, United States (IAD)
230 requests
Miami, United States (MIA)
210 requests
Boston, United States (BOS)
140 requests
Singapore, Singapore (SIN)
130 requests

Thanks for ideas.
by jbki | 2026-01-15 18:25:56+00:00
Not sure. Some are pretty good. Like the one on Nicolas Boileau. But compare the ledes in the article for diamond:

https://en.wikipedia.org/wiki/Diamond

Seems like they're focused on cramming so many details for the sake of accuracy or completeness. After reading that, I feel like my mental model of diamond was not enhanced in any way.

Britannica makes the opening a lot more readable and entices me to read further on without fear of getting lost.

https://www.britannica.com/topic/diamond-gemstone
by codesnik | 2026-01-15 18:25:56+00:00
I've been 10-11 at the time, and half the games I had didn't have an obvious "quit" menu option. I hated pressing the hardware "reset" button because it meant waiting for a minute again, staring at the BIOS setup screen.

Every time I figured out a weird hidden keyboard combination to exit from yet another game was a happy day.
by SAI_Peregrinus | 2026-01-15 18:26:32+00:00
Unless you've got something sanitizing env prints in your logs, no, they don't get masked. I've leaked secrets accidentally while debugging environment variable issues.

Of course the bigger side of the issue is that anyone who can run code in the CI context can view all data in the CI context. So if an untrusted dev can write a build script that executes with secrets in the environment, they can leak those secrets. CI is RCE-as-a-service, you implicitly give permission for anyone who can edit build scripts to run arbitrary code. Like you say, they can echo the secret to a file & upload it elsewhere, and they can also use it directly from the edited build script.
by AoT_WE | 2026-01-15 18:27:04+00:00
Dr. Jennifer Cassidy (Oxford, former UN/EU diplomat) argues that companies like Microsoft, Meta, and OpenAI now control three levers of power once held exclusively by states: information, infrastructure, and interpretation.
Some points: NATO runs on Microsoft Azure. France is deliberately building on Mistral to avoid US AI dependence. She reframes Clegg at Meta and Sunak at Microsoft not as a "revolving door" but a "circuit of influence" - power flowing continuously between capitals and Silicon Valley.
Also contrasts democratic vs authoritarian AI deployment - China's predictive policing anticipating who might commit crimes, not just where.
by 9rx | 2026-01-15 18:27:19+00:00
> That's just not how people or organizations run by people operate.

Au contraire. It's not very often that the cost of labor actually drops to anywhere close to zero, but we have some examples. The elevator operator is a prime example. When it was costly to hire an operator we could only hire a few of them. Nowadays anyone who is willing to operate an elevator just has to show up and they automatically get the job.

If 1,000 engineers are worth having around, why not an infinite number of them, just like those working as elevator operators? Again, there is no cost in this hypothetical scenario.

> Cost is not the only driver to demand.

Technically true, but we're not talking about garbage here. Humans are always valuable to some degree, just not necessarily valuable enough when there is a cost to balance. But, again, we're talking about zero cost. I expect you are getting caught up in thinking about scenarios where labor still has a cost, perhaps confusing zero cost with zero payroll?
Show HN: Public Apache Iceberg datasets via a REST catalog
by talatuyarer | 2026-01-15 18:27:31+00:00
Hi HN,

I’m one of the creators of this project.

We noticed that while many developers want to experiment with Apache Iceberg the "entry cost" is often high. You usually have to set up your own storage buckets, configure a catalog (like Hive), and ingest data before you can even run a single SELECT statement.

We wanted to lower that barrier. We’ve hosted a production-grade Iceberg REST Catalog on BigLake with public datasets (starting with the NYC Taxi data) that anyone can query.

You can point Spark, Trino, or Flink directly at the REST endpoint and start querying immediately.

You do need a Google Cloud Project ID for authentication/quota, but the data access itself is free and public.

I’d love to hear your thoughts. Are there specific datasets or Iceberg features you’d like to see added to the dataset?
by FiveOhThree | 2026-01-15 18:27:32+00:00
I'm also not American so I'm not well-versed in this topic, but perhaps to raise the obvious:

Does Wikipedia really need a page running for thousands of words on Musk allegedly making a Nazi salute?

It's longer than some of the content on major historical figures, yet this is a subject that I'd be surprised to see mentioned again after a few years have passed.

Considering that the subject matter is highly sensitive and concerns a living person I'm surprised that such an article was allowed at all.
by dgxyz | 2026-01-15 18:28:24+00:00
Yep that much. 64Gb DDR5 ECC sticks (128Gb don't exist at the moment apparently). They declined the PO 6 months ago. That'll teach 'em.

I was pissed that there weren't any sticks heading to the recycling out of the nodes otherwise I would make myself that chain :)
by dpark | 2026-01-15 18:28:32+00:00
> That being said, "who started what" and "who had what idea" are silly topics to obsesses about. It always come down to who put the long-term work in.

So Wales can write Sanger out of the history of Wikipedia, despite evidence strongly showing that Sanger originated the idea, the name, the policies, and indeed that Sanger was the primary driving force for years. And everyone’s is supposed to accept this historical revision because who created it is a “silly topic”.

Is it also a silly topic when Wales claims credit? Or only when someone questions his assertion?
by appplication | 2026-01-15 18:29:20+00:00
First off, love svelte, the team is really doing a good job focusing on developer ergonomics.

That said, I’m not surprised to see a list of CVEs impacting devalue. After running into some (seemingly arbitrary) limitations, I skimmed the code and it definitely felt like there was some sketchiness to it, given how it handles user inputs. If I were nefarious or a security researcher it would definitely be a focal point for me.
by Levitz | 2026-01-15 18:29:35+00:00
Funny enough, it would the movement stopped being about harassing women the moment the media stopped writing about it, advocates kept on going, criticizing ideological push into videogames to this day. At the same time by now both Brianna Wu and Anita Sarkeesian have been shown to be grifters who really knew jackshit but how to play a crowd.
Show HN: Superhuman for LinkedIn Inbox
by cblovescode | 2026-01-15 18:29:47+00:00
Hi HN,

I built Tact, a keyboard-first client that sits on top of your LinkedIn inbox and makes outbound faster without turning it into AI-generated slop.

The goal was to help people who do targeted, relationship-driven outreach move quickly while still writing every word themselves. Tact doesn’t ghostwrite messages or auto-send anything. Instead, it gives you speed, structure, and light AI coaching while you write.

What it does today:

- Keyboard-first LinkedIn inbox
Navigate conversations, open threads, reply, and move between messages using shortcuts instead of clicking through LinkedIn’s UI.

- Snippets + dynamic snippets
Reusable sentence/paragraph blocks with variables (name, company, role, etc.) that you can drop in instantly and still edit freely. Dynamic snippets let you just describe the variable, and we'll generate using enriched data and web search.

- Coaching instead of ghostwriting
AI flags things like missing personalization, awkward phrasing, or placeholders you forgot to update, but it doesn’t generate full messages for you.

It’s a thin layer focused purely on the act of writing and handling your LinkedIn inbox more deliberately. The mental model is closer to a power-user email client (Vim-style speed) than a "click a button and spray AI" tool.

You can try it here:
https://withtact.app

I’d love feedback on:

- Whether "coaching, not ghostwriting" is actually useful in practice

- How the keyboard UX compares to native LinkedIn

- What’s missing

Happy to answer questions about implementation details or anything else.