MurphyA/hacker-news huggingface dataset:
by NoMoreNicksLeft | 2026-01-14 16:55:29+00:00
This wouldn't happen unless they think they've cracked the code to mass control of human minds and spirits. They believe (correctly?) that not only can they do that, but that they're so far along in their mastery that they can announce this shit right now without causing themselves problems.

If you disagree, perhaps you're just one of the outliers they have determined they can ignore (for now). We see these threads on HN once a month, at least, and the comments are overwhelmingly positive. I will a 15 point updoot hit just for the comments in this thread before midnight.
by moduspol | 2026-01-14 16:55:52+00:00
This makes sense in the modern age where retailers accept returns for any/no reason and manufacturers tend to bend over backwards to get you to avoid returning anything.

Same reason why any furniture you order online seems to always have all the tools necessary to assemble it. They never require power tools and always include screwdriver(s) and/or Allen wrenches. They need to design away every possible reason someone might just return it.
by fennecfoxy | 2026-01-14 16:56:01+00:00
Tbh I think both of y'all are a boon to people mucking about with hardware and that petty arguments, MBA parasite stuff, etc is all counterproductive but fight all you like.

I stopped buying stuff from SF/AF ages ago as I find it all overpriced for the most part (for my use cases). But then again I've not been doing too many hardware projects recently anyway.

Odd situation tho, both have been bastions of this stuff since forever.
by arseniibr | 2026-01-14 16:56:14+00:00
Hi HN,

I've been working with MLOps pipelines lately, and it always bothered me that torch.load() (and Pickle in general) is basically an RCE vulnerability we've all just accepted. We download gigabytes of opaque weights from Hugging Face and run them in production, often with full privileges.

I looked for existing tools, but many relied on simple regex (easy to bypass) or didn't verify if the file was tampered with in transit.

So I built Veritensor. It’s a CLI tool to gatekeep models before they hit your runtime.

How it works under the hood:
1. Pickle Emulation — Instead of grepping for os.system, it emulates the Pickle VM stack. This catches obfuscated payloads (like STACK_GLOBAL assembly) without actually executing the code.
2. Identity Check — It hashes your local file and queries the Hugging Face Hub API to ensure it matches the upstream version bit-for-bit (detects MITM or corruption).
3. License Headers — It parses metadata from Safetensors/GGUF to detect restrictive licenses (like CC-BY-NC or AGPL) so you don't accidentally ship them in a commercial product.
4. Signing — Integrates with Sigstore Cosign to sign the container if the scan passes.

It supports PyTorch, Keras (checks for Lambda layers), and GGUF. Written in Python, Apache 2.0.

I’d love to hear your feedback on the detection logic or edge cases I might have missed with the Pickle emulation.

Repo: https://github.com/ArseniiBrazhnyk/Veritensor

PyPI: pip install veritensor
by hagbard_c | 2026-01-14 16:56:15+00:00
> Not sure what it means to me. Pre 1.0 of Firefox was what... 20 years ago?

Why does that matter? For those who were around at that time the release of the Netscape code was a big thing. This led to the further development of the Mozilla browser which was close to the closed-source Netscape suite, including loads of tools which were used by few but increased the code size and complexity. Eventually a new browser shell was created based on the Mozilla Gecko engine and the XUL user interface markup language. The release of the first usable versions of Firefox promised to fulfil the expectations raised by the release of the Netscape code: a relatively lightweight, capable browser which could be the tool to escape the stranglehold which Microsoft had on the web through its (ab)use of their desktop platform dominance and the Internet Explorer browser.

Now we're close to being back to where this started with Blink/Chrome instead of Internet Explorer - and for web developers the annoying presence of Safari with its lackluster adoption of 'standards' which threaten the app store income stream - and there is a clear need for an alternative. Servo may end up being this alternative no matter whether the Servo developers deem this to be the intended purpose of their work or not. As to whether they consider their code to be ready for testing I can only refer you to the site I linked to.

I have the idea you're reticent in accepting the possibility of Servo becoming the needed alternative to the Blink/Webkit hegemony. Am I correct in thinking so and if so, why is this the case?

Also, as a developer myself I subscribe to the 'release early, fail fast' philosophy. Early failures tend to be small failures, easily corrected. Servo has been under development for more than 13 years as a research project, first inside Mozilla, then outside after Mitchell Baker considered her ideologically driven political activism more important than Mozilla's actual core mission of developing web technologies and fired all Servo developers in 2020. Development continued nevertheless, now by volunteers. Here's where to go if you want to contribute to the development:

https://book.servo.org/contributing/getting-started.html
by EgregiousCube | 2026-01-14 16:56:51+00:00
It's possible (and in fact the law) that the journalist against whom a search warrant is issued is suspected of aiding in the leak or committing a crime, though. I don't think we yet know that she's not in that category; only that she claims that she was told that she wasn't the focus of the probe and was not currently formally accused of a crime.
by ortusdux | 2026-01-14 16:56:57+00:00
There was a great custom order screen printing website blog where they documented their shrinkage testing. They made a pressure sensitive shirt form and then ran 30+ brands of shirts through a battery of tests, measuring fit after each washing.

I've heard reports that the newer heat pump clothes dryers are less prone to cause shrinking. In their default mode they act more like a dehumidifier than a heater. In theory you can wash more delicate dry-clean only garments as well.
by belorn | 2026-01-14 16:57:18+00:00
This is not a comment about if journalists homes should be more sacred than other people. Some countries do give journalists extra legal protection against this, but I do not know US law in this regard.

To my understanding, a US search warrant authorize law enforcement officers to search a particular location and seize specific items. The requirements are:

1# filled in good faith by a law enforcement officer
2# Have probable cause to search
3# issued by a neutral and detached magistrate
4# the warrant must state specifically the place to be searched and the items to be seized.

There is nothing about the owner of the location. It can be a car, a parking lot, a home, a work place, a container, a safe, a deposit box in a bank, and so on.

The significant question here is about probable cause. Why were those items interesting for the FBI to collect? Are they looking to secure evidence against the leaker, and if so, what was the specifics of the search warrant?

Probable cause should not be about preventing journalists access to documents they already got, as that would be like going after Barton Gellman.
Show HN: Sovereign GraphGuard – Atomic Persistence for AutoGen Agents
by MohskiBroskiAI | 2026-01-14 16:57:27+00:00
"I fixed the 'Zombie State' bug in Microsoft AutoGen.

The Problem: Operational Ischemia. Process interruptions during atomic transitions left agents in a paradoxical state where work > 0 but queue is empty. The workflow stalled, falsely reporting completion.

The Solution: Sovereign GraphGuard.

Iron Seal Protocol: Replaced standard file writes with atomic fsync + rename (POSIX durability guarantees). This ensures zero-capitulation state persistence.

Ischemia Repair: Implemented an auto-healing logic (load_and_heal) that scans for and re-injects pending agents upon state load.

Zero-Allocation Serialization: Ported my learnings from optimizing Google's Go-GitHub library (where I achieved a 3x speedup via buffer pooling) to Python's serialization logic.

Results: Maintainers called it 'exemplary' and 'brilliant'. No more zombie workflows.

Theory: This implements the same 'Topological Stability' principles I proved in my Riemann Hypothesis paper—systems must be homologically structurally sound to survive entropy.

https://www.academia.edu/145999987/The_Spectral_Geometric_Pr...
by Dilettante_ | 2026-01-14 16:57:35+00:00
>it is not okay to consider that this labor fell from the sky and is a gift, and that the people/person behind are just doing it for their own enjoyments

Yes it absolutely is. That is the exact social contract people 100% willingly enter by releasing something as Free and Open Source. They do give it as a gift, in exchange for maybe the tiny bit of niche recognition that comes with it, and often times out of simple generosity. Is that really so incredible?
by ptorrone | 2026-01-14 16:57:40+00:00
sparkfun will continue to use limor’s open source code, libraries, and designs. that is how open source works, and we are fine with that, and that is awesome!

what is not speculation is - paul (teensy creator) told us directly that sparkfun’s decision to block us from purchasing teensy was final. that was not a heat of the moment thing, and it was not handled through normal purchasing channels. i do not even purchase. our purchasing team does. the same is true of the royalty payments sparkfun has made to adafruit for over a decade under standing agreements. there is essentially no day to day interaction. i asked if they are going to keep paying those, no reply yet.

the termination letter was addressed broadly to “adafruit leadership,” not to any specific operational contact. that alone tells you this was not a routine business dispute.

no current sparkfun employee did anything wrong here. one former employee did, and nate’s behavior toward limor has been an issue for years. i am done with that and him, so that part will sort itself out now.
by grayhatter | 2026-01-14 16:57:46+00:00
> it is not okay to consider that this labor fell from the sky and is a gift, and that the people/person behind are just doing it for their own enjoyments.

I am. I enjoy making things, and it's even better when others enjoy them. Just because you have expectations that you should be compensated for everything line of code you write; doesn't make it ubiquitous, nor should your expectations be considered the default.

I'd argue If you're creating and releasing open source with the expectations of compensation, you're doing it wrong. Equally, if you expect someone creating open source owes you anything, you're also part of the problem, (and part of why people feel they deserve compensation for something that used to be considered a gift).

All that said, you should take care of your people, if you can help others; especially when you depend on them. I think you should try. Or rather, I hope you would.
by mschuster91 | 2026-01-14 16:57:50+00:00
> But just a few months ago, they came out and said there were no more documents to release

That lie is a different but just as pressing problem. But that, at least, is far easier to hold the responsible people accountable... assuming of course someone actually wants to dive into that rabbit hole, and current Congress doesn't look like it will. Maybe after the mid-terms there will be some movement if the shift is serious enough, but for now I'll assume the worst case that either no one will be held accountable, or Trump will issue a blanket pardon again.
by mullingitover | 2026-01-14 16:58:08+00:00
Flagging off news about current events (whether you support the regime or not) is counterproductive to a forum nominally for the startup community. Startup founders need to be aware of the environment they are operating in, so if the current environment is a corrupt fascist authoritarian one then you need to be prepared to operate in that type of business environment. If you now need to bribe certain officials in the regime in order for your startup to succeed, for example, flagging posts about how that's necessary is counterproductive.
by AndyNemmity | 2026-01-14 16:58:16+00:00
Here is one of the agents. I prefer large agents, so you can tweak it to your purposes. It also calls some of my skills and other pieces, but it will give you the "gist" of it.

https://gist.github.com/notque/e57cb975a3df7780824ce4085a59a...
by ryandrake | 2026-01-14 16:58:50+00:00
I've also seen bad "lower level" managers fail downward. But I think at some point on the manager totem-pole, you become this weird "invulnerable royalty," and always fail upward. You never see VPs get fired and move back down to 3rd-level managers. You never see SVPs get fired and move back down to being mere VPs. They always get fired and then move over to Dell or Intel or something at an even more senior level than they were at their previous company.
by kylegalbraith | 2026-01-14 16:58:55+00:00
As a founder of Depot [0], where we offer our own faster and cheaper GitHub Actions runners, I can assure everyone that this feeling is the majority and not the minority.

Sounds strange to say as someone who has a product that is built around making GitHub Actions exponentially faster to close these feedback loops faster.

But I can honestly say it's only really possible because the overall system with GitHub Actions is so poor. We discover new bottlenecks in the runner and control plane weekly. Things that you'd think would be simple are either non-existent, don't work, or have terrible performance.

I'm convinced there are better ways of doing things, and we are actively building ideas in that realm. So if anybody wants to learn more or just have a therapy session about what could be better with GitHub Actions, my email is in my bio.

[0] https://depot.dev/
by onlyrealcuzzo | 2026-01-14 16:59:04+00:00
Arguably the jump around the space age is a bigger jump than everything else between ~1900 and now - whenever you want to define that small period.

We may be in a similar step-jump period now, where over the next 10-15 years we'll see some pretty big advancements in robotics due to AI, and then all of the low hanging fruit will be picked until there some other MAJOR breakthrough
by peterldowns | 2026-01-14 16:59:06+00:00
Ben, you probably don't remember me but you hired me ages ago to help out with the Python client for Timber. Just want to say thanks for that opportunity — it's been amazing to watch you guys succeed.

Also, I've ended up being responsible for infra and observability at a few startups now, and you are completely correct about the amount of waste and unnecessary cost. Looking forward to trying out Tero.
by zdp7 | 2026-01-14 16:59:07+00:00
Unfortunately, it's not that simple. I'm currently moving from Windows to Linux. As a gamer it's been interesting to see my game count under both systems. I believe in Linux my gamescount is about a third of what I can install on Windows. Most of those will run fine under Linux, but there is a very important category that won't. Competitive online games. A good percentage of them have Anti cheat that doesn't support Linux (it can, but the publisher has chosen not to). Sony and MS own many of the top tier studios and would have the opportunity to block their games from playing on SteamOS. People would end up avoiding the Intel console due to game selection.
by mrguyorama | 2026-01-14 16:59:41+00:00
Purposely misgendering someone is asshole behavior but it's not like pronouns are slurs and censoring the pronouns in that chain just makes it hard to read.

Good lord that PT guy seems to be crazy though. Why do some people lose their goddamned minds when they are criticized?

Glad he doesn't own Hackaday anymore I guess.

Still don't know wtf "Limor" is....
by dvcoolarun | 2026-01-14 17:00:33+00:00
I built this: https://github.com/dvcoolarun/web2pdf — a CLI tool for converting web pages to PDFs, recently open-sourced after adding several new features. (Might be useful!)

# -- Not related to the thread, but if anyone is looking to hire a developer or knows of opportunities, I was recently let go and am actively searching. Any leads or feedback would be greatly appreciated.

# Reference CV --> https://docs.google.com/document/d/e/2PACX-1vTbzXMOHLvLyjA7j...
by 0x000xca0xfe | 2026-01-14 17:00:42+00:00
We have those maggots (BSFL) sometimes in our compost naturally and I would never eat anything made with them.

The problem is not even the animal/maggot itself but the fact that it consumes ANYTHING. Old apples, coffee grounds, house plants, dead rats, everything.

The incentives to produce them more cheaply by feeding them trash (actual trash not mango peelings) is obvious and just too risky.
When cost is the only reason they matter anyways, why waste money on quality ingredients or good QA?
by pron | 2026-01-14 17:00:58+00:00
> Does that include Rust?

No. Most memory management in Rust is not through it's GC, even though most Rust programs do use the GC to some extent.

> I'm not looking at current social/market trends but limits of physics and hardware.

The laws of physics absolutely do not predict that the relative cost of CPU to RAM will decrease substantially. Unforeseen economic events may always happen, but they are unforeseen. It's always possible that current trends would reverse, but that's a different matter from assuming they are likely to reverse.

> Overall, I think using C++ with all of its modern features should be in the ballpark of safe/fast as Zig, with Zig having a better compile time.

I don't know how reasonable it is to think that. If Rust's value comes from eliminating spatial and temporal memory safety issues, surely there's value in eliminating the more dangerous of the two, which Zig does as well as Rust (but C++ doesn't).

But even if you think that's reasonable for some reason, I think it's at least as reasonable to think the opposite, given that in almost 30 years of programming in C++, by far my biggest issue with the language has been its complexity and implicitness, and Zig fixes both. Given how radically different Zig is from C++, my preferenece for Zig stems precisely from it solving what is, to me, the biggest issue with C++.

> Also don't see how much of Zig design could really assist code reviews and testing.

Because it's both explicit and simple. There are no hidden operations performed by a routine that do not appear in that routine's code. In C++ (or Rust), to know whether there's some hidden call to a destructor/trait, you have to examine all the types involved (to make matters worse, some of them may be inferred).
by mock-possum | 2026-01-14 17:00:59+00:00
It’s a hard thing to wrap your head around, but: the idea is that racial differences are already enshrined, by racists. if racists weren’t pushing the idea, it would hardly be an idea at all.

Try explaining to a “go back to where you belong” racists that you’re not from Africa (or from Mexico, or wherever) - you have a different ethnic background, or you’re a natural born citizen - racists don’t care about the nuance, you’re coloured and they’re bigoted, and race differences are enshrined.

So if that’s the case - if you’re just going to be lumped into the same bucket as every other (say) black person anyway - then you’re only going to make yourself weaker by dividing yourselves - you need to organize to push back against racism, and that means your natural allies are going to be all the other people that racists are racist about - and by extension, all the other people bigots are bigoted about. Now it doesn’t matter if you were born in Egypt, or in the Sudan, or in Somalia or Jamaica or Haiti or Illinois- racists all treat you as ‘black’, and it’s on that basis, that shared identity as people oppressed for being black, that you struggle for justice.

And what is justice if not redress?

Anyway the point I’m making here is, it’s not DEI that’s enshrining race - it’s racists. The reason DEI is organized along racial lines is because that’s how racism is applied by the bigots who believe in that crap.

Very much along the same lines of why “all lives matter” in response to “black lives matter” is a very deliberately racist statement - because it’s mocking the struggle of oppressed people to get justice for themselves and to defend themselves from their oppressors.
by itta_e_ta | 2026-01-14 17:01:22+00:00
Thank you! Bill data from the Congressional API stops at around 1972 (this site stopping at 1975 over 1972 is somewhat arbitrary). Much of our modern visibility into Congress (e.g. C-SPAN and detailed publication of bill actions) emerged as a fallout of Watergate. Before that you can sometimes reverse engineer bills from what ultimately became law, but metadata / action details are sparse. Some earlier Congresses do have actions available, and coverage is gradually being expanded as far as I can tell.

I’d like to have full coverage eventually. A complete Executive Order history exists via the UCSB American Presidency Project, but for now I’ve only uploaded what’s available from the Federal Register.

My next focus is adding donations and net-worth data to legislator pages. After that I’d like to add some form of commenting and voting to make the site more interactive around currently in progress legislation.

This is actually my second attempt at the UI :) I like it, but I’m definitely biased and have lost track of what may be confusing to new users. Open to any feedback!
by mattashii | 2026-01-14 17:01:28+00:00
Epic wasn't fined for putting things on sale. Instead, it was fined for putting pressure on children to buy things that were put on sale; e.g. through wording like "Get it now" and "Grab it", and through design.

For details, check the ruling here (Dutch): https://uitspraken.rechtspraak.nl/details?id=ECLI:NL:RBROT:2...
by Capricorn2481 | 2026-01-14 17:01:42+00:00
> The American Left has spent the better part of the last century attacking the 2nd Amendment

That's doing a lot of heavy lifting. I know Republicans who unironically say shit like "We can't do background checks. What if I'm trying to buy a gun really quick for a hunting trip?" I would imagine your idea of "attacking" the second amendment is just common sense laws.

> Just a few years ago, their own supporters were smugly saying that standing up to the government is a fantasy for paranoid whackjobs.

In your heart of hearts, do you really believe this has anything to do with it? If we were to take your comment seriously, it just illustrates the right never actually cared about standing up to oppressive governments, they just wanted to be the oppressive government. That is actually pretty consistent with how the left clocked them.

But in reality, it has nothing to do with what you wrote. The biggest 2A fanatics, as someone related to quite a few of them, just have a fantasy of shooting people. They are openly celebrating the death of Renee Nicole Good because that's the kind of thing they want to do.
by 1-more | 2026-01-14 17:01:49+00:00
Adafruit is maybe an all time amazing success story built on giving more of a shit than anyone else. There is a direct through line from reading MAKE in high school through programming the 8 LED POV thing through the rest of my career. Limor doesn't answer a forum question on a Sunday morning in like 2008 and I don't make my mortgage payment this month and my son gets store brand formula. I wish you every success professionally and in this new chapter with your tiny miracle, and I hope for an amicable resolution to this whole Sparkfun thing.
by packetlost | 2026-01-14 17:02:02+00:00
Even if the 1st shot through the front of the vehicle is ruled (if it even gets to that point) to be legit, the 2nd and 3rd through the side window almost certainly wouldn't. There's virtually no way this guy walks free if it goes to a fair trial.

If I was on a jury for that case, I'd need some very, very convincing evidence to suggest the officer was in serious fear for his life (or anyone else's) given the publicly available evidence now.