MurphyA/hacker-news huggingface dataset:
by realusername | 2026-01-14 21:53:25+00:00
I mean yeah sure, third party apps on android have a strong security model but what's the point when GrapheneOS is the only rom making updates on time, the play store runs as admin and manufacturer apps and driver can do whatever they want?

The OS is borked even before you install even a single of these highly sandboxed third party apps.

While in theory that model sounds great, in practice the security is worse than your average Linux distribution and the only people which managed to make it work is the GrapheneOS non-profit representing less that 0.1% of the devices.

(And ironically the only secure Android rom doesn't fully pass Play Integrity)
by mmooss | 2026-01-14 21:53:45+00:00
> the doom and gloom after the Twitter layoffs predicting the site would implode and go permanently offline "within a month" which...never happened.

Many think Twitter has imploded, though it's online.

> You do realize it's possible for an organization to be overstaffed?

It's possible to be understaffed or appropriately staffed. Anything is possible!
Distributed SQL engine for ultra-wide tables
by synsqlbythesea | 2026-01-14 21:53:57+00:00
I ran into a practical limitation while working on ML feature engineering and multi-omics data.

At some point, the problem stops being “how many rows” and becomes “how many columns”.
Thousands, then tens of thousands, sometimes more.

What I observed in practice:

- Standard SQL databases usually cap out around ~1,000–1,600 columns.
- Columnar formats like Parquet can handle width, but typically require Spark or Python pipelines.
- OLAP engines are fast, but tend to assume relatively narrow schemas.
- Feature stores often work around this by exploding data into joins or multiple tables.

At extreme width, metadata handling, query planning, and even SQL parsing become bottlenecks.

I experimented with a different approach:
- no joins
- no transactions
- columns distributed instead of rows
- SELECT as the primary operation

With this design, it’s possible to run native SQL selects on tables with hundreds of thousands to millions of columns, with predictable (sub-second) latency when accessing a subset of columns.

On a small cluster (2 servers, AMD EPYC, 128 GB RAM each), rough numbers look like:
- creating a 1M-column table: ~6 minutes
- inserting a single column with 1M values: ~2 seconds
- selecting ~60 columns over ~5,000 rows: ~1 second

I’m curious how others here approach ultra-wide datasets.
Have you seen architectures that work cleanly at this width without resorting to heavy ETL or complex joins?
by LoulouMonkey | 2026-01-14 21:54:05+00:00
A lot of very nice websites have been shared so far.

Here's my modest contribution:

https://blanchardjulien.com/

https://javascriptfordatascience.com

Your feedback is more than welcome!

(Oh and here's "Loulou",my static site generator: https://github.com/julien-blanchard/Loulou)
by DiscourseFan | 2026-01-14 21:54:28+00:00
Hitler did not come to power out of a Jacobin movement, he came to power during a time just like our own, when a moderate government was convinced that there was no better alternative to their style of rule. It is dangerous to argue in favor of a stable middle class when history would prove that such forms of society are often fleeting when they do occur. Waves inevitably crash along the shore, which doesn’t mean they aren’t beautiful while they roll along it.
by dehugger | 2026-01-14 21:54:31+00:00
Write your own tools. Dont use something off the shelf. If you want it to read from a database, create a db connector that exposes only the capabilities you want it to have.

This is what I do, and I am 100% confident that Claude cannot drop my database or truncate a table, or read from sensitive tables.
I know this because the tool it uses to interface with the database doesn't have those capabilities, thus Claude doesn't have that capability.

It won't save you from Claude maliciously ex-filtrating data it has access to via DNS or some other side channel, but it will protect from worst-case scenarios.
by Fazebooking | 2026-01-14 21:54:44+00:00
Its still not a Hype, its still crazy what is possible today and we still have no clear at all if this progress continues as it does or not with the implication, that if it continues, it has major implications.

My wife, who has no clue about coding at all, chatgpted a very basic android app only with guidance of chatgpt. She would never ever been able to do this in 5 hours or so without my guidance. I DID NOT HELP HER at all.

I'm 'vibecoding' stuff small stuff for sure, non critical things for sure but lets be honest, i'm transforming a handfull of sentences and requirements into real working code, today.

Gemini 3 and Claude Opus 4.5 def feel better than their prevous versions.

Do they still fail? Yeah for sure but thats not the point.

The industry continues to progress on every single aspect of this: Tooling like claude CLI, Gemini CLI, Intellij integration, etc., Context length, compute, inferencing time, quality, depth of thinking etc. there is no current plateau visible at all.

And its not just LLMs, its the whole ecosystem of Machine Learning stuff: Highhly efficient weather model from google, Alpha fold, AlphaZero, Roboticsmovement, Environment detection, Image segmentation, ...

And the power of claude for example, you will only get with learning how to use it. Like telling it your coding style, your expectations regarding tests etc. We often assume, that an LLM should just be the magic work collegue 10x programmer but its everything an dnothing. If you don't communicate well enough it is not helpful.

And LLMs are not just good in coding, its great in reformulating emails, analysing error messages, writing basic SVG files, explaining kubernetes cluster status, being a friend for some people (see character.ai), explaining research paper, finding research, summarizing text, the list is way to long.

Alone 2026 there will go so many new datacenters live which will add so much more compute again, that the research will continue to be faster and more efficient.

There is also no current bubble to burst, Google fights against Microsoft, Antrophic and co. while on a global level USA competets with China and the EU on this technology. The richest companies on the planet are investing in this tech and they did not do this with bitcoins because they understod that bitcoin is stupid. But AI is not stupid.

Or Machine learing is not stupid.

Do not underestimate the current status of AI tools we have, do not underestimate the speed, continues progress and potential exponential growth of this.

My timespan expecation for obvious advancments in AI is 5-15 years. Experts in this field predict already 2027/2030.

But to iterate over this: a few years ago no one would have had a good idea how we could transform basic text into complex code in such a robust way, which such diverse input (different language, missing specs, ...) . No one. Even 'just generating a website'.
by publicdebates | 2026-01-14 21:54:49+00:00
Wow, you weren't kidding

> In Xoscript, the meaning of True and False is not fixed. In fact, a Xoscript program gets pretty shaken up over a statement like this: [True := False.] The result of such actions is undefined, however it remains a valid action and therefore formally allowed. Furthermore, there is a Boolean object, which is the root object of both True and False, as both are derivatives of the root object. The Boolean object itself, however, does not provide any practical application.
by piffey | 2026-01-14 21:55:23+00:00
Outside of what has been mentioned here (thanks folks for some new brands) I've found clusters in Canada and Portugal of great clothing brands making quality products with good materials:

Canada
- Anian (https://anianmfg.com/) for wool products.
- Reigning Champ (https://reigningchamp.com/) for cotton tees.

Portugal
- La Paz (https://lapaz.pt/)
- Isto (https://isto.pt/)
- Portugese Flannel (https://www.portugueseflannel.com/)

I also like this site No Man Walks Alone to find quality brands. It is about learning how to spot quality though in stitching and fabrics. Wish there was more educational materials out there on this.
by seanmcdirmid | 2026-01-14 21:55:28+00:00
> There's still brakes, suspensions, tires, etc. to sell to EV buyers.

The brakes last a lot longer because of regen, everything else applies but is pretty marginal, although I had to pay BMW $500 to replace a tire on my i4 because of a nail. I could have shopped around for that I guess.
by Imustaskforhelp | 2026-01-14 21:55:49+00:00
Downvoting is an issue sometimes yes but I understand that.

Flagging on the other hand to me on a post as such and other attempts genuinely sadden me because I was only able to discover this flagged post because people wrote about this article in the post I built which has also promptly got flagged.

I don't even know how else to say but I saw two people here in such discussions either worry about their wives or sons in laws and my heart goes out to them. Hackernews is a vast place but its still niche compared to tech giants, we are a community mostly built around each other and curiosity. Curiosity goes to dumpster fire if events like these happen and B) they are flagged by the same community we all think to be a part of.

I have been a vocal supporter of hackernews usually. Because I like the website but I am genuinely seeing it crack and you really never know what can get flagged because I genuinely didn't expect such posts to be flagged because of how valuable they are. I can't fathom why Hackernews might do this, When I had posted the comment it wasn't intended to be political but rather just a massive news development which impacts technological and actual people and geopolitics and I wanted people to discuss it in here on Hackernews for as so, give insights and have discussions.

Perhaps I am feeling hurt and that's because I am because "et tu brute hackernews?"

I then discovered that news.ycombinator.com/active (from one of the comments here, thank you c42) which can still show flagged posts.

I didn't know about the /active and I have been in this community for quite a long time and I didn't know that /active could show flagged posts so I am probably gonna create a tell HN about it

Sharing my sympathies to anyone who is troubled & personally impacted over this recent development. I hope humanity unites together and works for a more affordable & better future for the average person. Peace and hugs.
by elheffe80 | 2026-01-14 21:55:52+00:00
This is what I am strongly considering doing. In my list of games I regularly play only one or two don't fully support linux. I have 10, and ran never 11 so I dont get pestered, but the time is rapidly approaching for my semi-annual windows refresh. I am trying to find reasons to upgrade to 11 and so far the list is empty.
by refulgentis | 2026-01-14 21:55:52+00:00
These prompt injection techniques are increasingly implausible* to me yet theoretically sound.

Anyone know what can avoid this being posted when you build a tool like this? AFAIK there is no simonw blessed way to avoid it.

* I upload a random doc I got online, don’t read it, and it includes an API key in it for the attacker.
by AngryData | 2026-01-14 21:56:14+00:00
In my opinion it isn't useful at all because if the only thing you can get into a spot is a vehicle with 4-wheel steering, you have already fucked up your site planning. You aren't going to be delivering materials with that thing, bulk materials are too heavy and light materials are too large. Maybe tools, but it isn't that large to be a tool truck and too expensive for small handyman type work.
by irishcoffee | 2026-01-14 21:56:17+00:00
> Carhartt makes some okay dressy dungarees. Their work pants are worthless these days though (in my experience). They've been pivoting to lifestyle for a few years now.

Carhartt are the most durable clothes I own. Whatever Levi’s did, their jeans went from lasting years to literal months before they would rip. Had the same 3 pairs of Carhartt work pants for half a decade with no end in sight.

Maybe something changed between 2020 and 2025, shrug
by vablings | 2026-01-14 21:56:32+00:00
> No one, including the FBI has ever made a statement that it was stolen and then charged O’Keefe for that

This is blatantly false two people were charged in connection with interstate transport of stolen goods, and the raid was part of the investigation. The diary was taken because it was the stolen good in question and important for the FBI's case on prosecuting the individuals charged.

>then you do the outcome of a diary that explains that Biden according to his daughter sexually abused her?

The diary was never published, verified or entered into evidence VS the current POTUS has had multiple credible allegations with affidavits and testimony
by kingstnap | 2026-01-14 21:56:38+00:00
Well we can see how much we would even expect this to matter.

For example take the 2024 Financial Report of Hydro One (distributor for Ontario) [0].

Apparently they earned 8,484M in revenue, and spent 4,143M in Power, and Net Income was 1,156M. Putting these together you can sort of conclude that the price of the electricity is around 1/2 their expenses.

If I then go to Ontario Power Generation financial reports 2024 [1], Revenue was apparently 7,187M, with Fuel Costing 1,049M, and net income around 1,006M. This sort of tells you that the price of fuel is only around 1/6th of their expenses.

I spent some time thinking about this and I'm not sure what to conclude other than probably a lot of what you pay is just paying for staff and maintenance and so even if fuel was free where I live it would be like a 1/12th change. Assuming the big savings in Wind are supposed to be from not having to pay for Fuel.

[0] https://www.hydroone.com/investorrelations/Reports/Hydro%20O...

[1] https://www.opg.com/reporting/financial-reports/
by marginalia_nu | 2026-01-14 21:57:18+00:00
Been living off grants and donations for a few years now. My 2c is you probably don't need to invent a new platform to fund open source development. There are tons of platforms and systems in place already. That's not's what's missing. You need to get open source developers that want to get paid for their work to spell that fact out to their users and supporters.

Yes this is uncomfortable, but the simple fact is that if you don't tell anyone you want to get paid, you probably won't be given any money. Standard seem to be maybe there's a donation link somewhere on the site, buried 4 clicks deep in the FAQ, more often than not something like a paypal.

The reality is that if you do ask for money, surprisingly often people will straight up just give you money if they like what you're doing. Like people get paid real money for screaming at video games on Twitch, meanwhile you're building something people find useful. Of course you can make money off it. But you gotta ask for it, the game screamers on twitch sure do. That's the secret. Sure there's a scale from asking for donations and doing a Jimmy Wales and putting a your face on a banner begging for donations; and while going full jimbo is arguably taking it too far, it's also probably closer to the optimum than you'd imagine.

If you have corporate users, word on the street is you can also just reach out to them and ask for sponsorship. They're not guaranteed to say yes, but they're extremely unlike to sponsor you spontaneously.
by _ache_ | 2026-01-14 21:57:58+00:00
You just read the title don't you?

> GitHub should charge every org $1 more per user per month

It's about org, not about every single person using Github.

The idea is basic and should have been written in the article.
When a contributor release FOSS, it's fair to compensate if you business rely on it.

A contributor wouldn't like a free for personal use either.
The ideal license is the Unreal one free for « Individuals and small businesses (with less than $1 million USD in annual gross revenue) »

> you're kind of dumb for giving it away and that's your fault.

It happens so many times and no just about software (but then it's not a million dollar company). It's not that you are dump, you done the right thing and some companies with money/power/opportunity to capitalize on it, did it and didn't compensate you fairly.
by rcxdude | 2026-01-14 21:58:40+00:00
The complication is that it doesn't work reliably. You can train an LLM with special tokens for delimiting different kinds of information (and indeed most non-'raw' LLMs have this in some form or another now), but they don't exactly isolate the concepts rigorously. It'll still follow instructions in 'user input' sometimes, and more often if that input is designed to manipulate the LLM in the right way.
by observationist | 2026-01-14 21:59:12+00:00
If they're on different phones, they could be on different bands, different towers, and different paths, one or more of which could be impacted by whatever the underlying problem is. iPhone vs Android would be the most blatant tell that something like this is at fault, but it could also be different configurations from different stores causing them to interact with the cellular network in different ways.

Something like a routing configuration, BGP failure, or underlying network misconfiguration would cause seemingly bizarre results with some phones working and some not with no obvious correlation. Compare Access Point Names under Mobile Settings on android, and whatever the equivalent is on iPhones, and check things like whether 5G allowed and data roaming is enabled.

If it's a cyber attack of some sort, then there's all sorts of different attack vectors that would cause these outcomes.
by nuky | 2026-01-14 21:59:20+00:00
Yeah difftastic and similar tools help a lot with formatting noise really.

My question is slightly orthogonal though: even with a cleaner diff, I still find it hard to quickly tell whether public API or behavior changed, or whether logic just moved around.

Not really about LLMs as reviewers — more about whether there are useful deterministic signals above line-level diff.
by quickthrowman | 2026-01-14 21:59:30+00:00
> At the end, all the doctors fought to pay the bill because it was a tax write-off (business expense?

Why would you fight to pay 70 cents on the dollar instead of letting someone else pay?

I don’t get it, a tax write off is only worth (dollar amount((dollar_amount * tax rate in percent)

Example: You spend $100 and pay 30% in corporate tax. Your write off that you spent $100 for is worth $30, end result is you’re out $70.

If you let someone else pay and just pay taxes on your $100, you keep $70.
by Fazebooking | 2026-01-14 21:59:39+00:00
1) no one cares if it works. No one cared before how your code looked as long as you are not a known and well used opensource project.

2) there are plenty of services which do not require state or login and can't be hacked. So still plenty of use cases you can explore. But yes i do agree that Security for production live things are still the biggest worry. But lets be honest, if you do not have a real security person on your team, the shit outthere is not secure anyway. Small companies do not know how to build securely.
by jandrese | 2026-01-14 22:00:05+00:00
My understanding is the difference in carbon emission from manufacturing a BEV vs. an ICE vehicle is about 4 tons of carbon, roughly what you would get from 400 gallons of gasoline. So to make up the carbon deficit the BEV needs to drive about 8,000 miles assuming the ICE truck has above average highway MPG. This does assume the electricity comes from renewables though, if you have coal fired electricity then the figure may vary wildly.
Show HN: Rr – Distribute AI agent test runs across your spare machines
by RileyHilliard | 2026-01-14 22:00:10+00:00
Hey HN,

I had Mac Minis sitting in the corner doing nothing and a laptop battery that tanks whenever I run tests when working from a coffee shop & on battery power. So I built a CLI that syncs code over SSH and runs commands remotely on my (usually) idle hardware. That's basically it.

```
brew install rileyhilliard/tap/rr
rr run "make test"
```

Where this got surprisingly useful: heavy TDD with Claude Code. When you're running swarm agents or sub-agents, they all want to run tests constantly to verify their work. Great in theory, but suddenly you've got 3-4 parallel processes all hammering your test suite at once on your laptop. Tests fail because they're stomping on each other, ports are already in use, your laptop is melting, etc.

rr handles the coordination automagically. It tries your LAN IP first, falls back to Tailscale when you're remote, and waits if someone else (which is probably you in another terminal) is already using the machine. Throw multiple hosts at it and it'll load balance across whatever's available.

```
hosts:
mini-1:
ssh:
- 192.168.1.50
- mini1-tailscale
mini-2:
ssh:
- 192.168.1.51
- mini2-tailscale
```

The parallel execution part is where it gets quite nice. My test suite takes ~60s on one machine. Partitioned across three, it finishes in ~20s. Same tests, 3x faster. Agents checking work via TDD stay productive instead of sitting around waiting.

This isn't really a CI/CD thing (that's async, runs when you push). rr is for your active dev loop when you want results NOW so you can keep iterating.

Any hardware that holds an SSH connection works. Old laptops, cloud boxes, whatever. Minimal setup on the remote side.

https://github.com/rileyhilliard/rr
by asdff | 2026-01-14 22:00:42+00:00
The only issue I've ever had with trail maps is my first time at Mammoth. For those who aren't familiar, there is actually a sort of valley between the first set of chair lifts and then the summit, so you can't actually go from say the summit to the high five express lift, you have to go around this front ridge then work your way to the high five express lift. On the trail map painting, this ridge is pretty subtle and hard to appreciate without already knowing about it.
by bsder | 2026-01-14 22:00:44+00:00
> The details don't matter.

The details very much DO matter.

You can look at all manner of posts here on HN that explain exactly how you should do age verification without uploading IDs or giving central authority to some untrustworthy entity.

The fact that neither the governments proposing these laws nor the social media sites want to implement them those ways tells you that what these entities want isn't "verification" but "control".

And, yes, most of us object to that.
by jacquesm | 2026-01-14 22:00:56+00:00
There are multiple comments in this thread suggesting that the outage in Spain was caused by wind power.

This has also been suggested by various politicians and others in front of a microphone or a camera without any basis in fact whatsoever. There is a (by now remote) chance that indeed wind power (or renewables in general) were the primary cause but the evidence points in an entirely different direction, the lack of control authority and undampened oscillations getting out of control. In such a situation various safety protocols dictate that sections of the grid disconnect and go into island mode or switch off altogether. This to prevent damage to the grid and to all of the grid connected devices. As these outages go, I think it was handled extremely well, the main question remaining is what the root cause was and what should be done to avoid a repetition.

https://en.wikipedia.org/wiki/2025_Iberian_Peninsula_blackou...
by TZubiri | 2026-01-14 22:01:32+00:00
in posix compatible systems (linux)

adduser llm
su llm

There you go. Now you can run commands quite safely. Add or remove permissions with chmod chown and chgrp as needed.

If you need more sophisticated controls try extensions like acl or selinux.

In windows use its builtin use, roles and file permission system.

Nothing new here, we have been treating programs as users for decades now.