MurphyA/hacker-news huggingface dataset:
by dexwiz | 2026-01-22 20:50:23+00:00
I don't even think it's the same across viewers. When my partner and I watch some shows, we make prediction for the plot and evaluations of characters. We even have a bet book where we record and score predictions for some shows. It's makes watching much more engaging, especially if the creators hide details and foreshadowing in the background. But you don't even need high quality content to do this, just tighten the restrictions. Law and Order and Hallmark movies only get 30 seconds of content before we make predictions.

It's much more stimulating than just passive consumption. If I don't do this I feel like brain turns to mush after a few hours of TV.
by tbdfm | 2026-01-22 20:50:27+00:00
If you are avoiding a colonoscopy because you don’t want to get knocked out, they can do it while you’re awake.

If for some reason you don’t want to be anesthetized you can just ask. It is also cheaper this way and you can drive yourself home.

Based on my limited research it seems like anesthesia is mostly there because people are prude.

The painful parts of procedure doesn’t hurt any more than having bad gas pain.

And it’s only a few less-than-ten-second points during the procedure that are anywhere near what I would describe as painful.

The insertion of the camera is rather jarring if you’re not used to having things stuck up your ass, but again surprisingly painless.

I was able to watch along with the doctor on a massive tv screen and see my own innards.

Worst part was taking preparatory laxatives before.

Overall not a bad experience for the piece of mind it provided.

Get a colonoscopy if you are due or have reason to believe you should get one.
by zbentley | 2026-01-22 20:50:48+00:00
This is an interesting idea--that in a reimagined OS, programs could have their output connected to all sorts of sinks (terminal, file, GUI, web content) without carrying baggage related to those sinks' behaviors.

I think the core question is whether some middle layer of output processing between program and sink/display could be created that knows enough about (using terminals as an example sink) raw mode/console dimensions/buffering to make most programs display correctly enough for most users without knowing specifics about the program writing the output's internals. If that can be done, then programs that need more specifics (e.g. complex animated/ncurses GUIs) could either propose overrides/settings to the output middleware or configure it directly, and programs that don't wouldn't.

That's possible to implement, sure, but can that be done without just reinventing the POSIX terminal API, or any one of the bad multiplatform-simple-GUI APIs, badly?
by miduil | 2026-01-22 20:51:39+00:00
yes sorry, just updated my comment shortly before you replied.

This is CVE-2025-36911, the other ones were CVE-2025-20700, CVE-2025-20701, CVE-2025-20702. Coincidentally a similar set of headphones affected.

This one also has a pairing vulnerability, but I assume fast pair is on the BLE level:

> To start the Fast Pair procedure, a Seeker (a phone) sends a message to the Provider (an accessory) indicating that it wants to pair.
> [...] allowing unauthorised devices to start the pairing process [...]

It's a pity that this is only awarded with $15k, this is a really bad vulnerability - which clearly required thoughtful investigation, publishing, reporting, ... and would have a much bigger audience in the exploit market.
by ahmetd | 2026-01-22 20:51:53+00:00
I think what he's referring to is the notion that all companies want monopolies. Peter Thiel talks a lot about this. So if you can't have a monopoly, and you're in a business where everyone is lowering the prices etc, it's not ideal.

I think "winning" here refers to success in money, power, etc. However society generally defines it!

In my humble opinion, it doesn't matter if you're in the game for long if you don't even matter.

Alrigth but the tldr is that he's looking for markets where domination is a possibility, so that's my takeaway anyways! :)
by cafard | 2026-01-22 20:52:25+00:00
As far as I know, all branches of the US military write up a "fitness report" for each officer once a year. "Above Average" is a certain career killer.

But somebody who was a dean at (I think) Virginia Tech wrote that the British "His work is quite sound, actually" could be higher praise than the American "His work sets the standard we all aspire to."
by bhouston | 2026-01-22 20:52:57+00:00
You definitely cannot do it all at once, all you can do is what China and India are doing, which is to slowly sell US treasuries over many years. China used to hold $1.3T of US treasuries but they now only hold just under $0.7T, thus about half has been sold. India similarly has reduced their holdings from $240B to $190 over the last year. It can be done, just not quickly.

Stocks generally survive currency devaluations, but treasuries do not. So I am not a fan of treasuries in this environment, but US stocks should be fairly resistant except for their dependency on the US economy, which could be disrupted in a currency devaluation.
by neom | 2026-01-22 20:53:00+00:00
I didn't because I wasn't really doing anything serious to my mind, I think? basically felt like watching an episode of pbs spacetime, I think the difference is it's more like playing a video game while thinking you're watching an episode of spacetime, if that makes sense? I don't use chatgpt for me real work that much, and I'm not a scientist, so it was for me just mucking around, it pushed me slightly over a line into "I was just playing but now this seems real", it didn't occur to me to go back through and check all the papers, I guess because quite a lot of chatting had happened since then and, I dunno, I just didn't think to? Not sure that makes much sense. This was also over a year ago, during the time they had the gpt4o sycophancy mode that made the news, and it wasn't backed by webserch, so I took for granted what was in it's training data. No good excuse I'm afraid. tldr: poor critical thinking skills on my part there! :)
by goda90 | 2026-01-22 20:53:19+00:00
I can think of a lot of confounding factors for that. Are they just looking at standing desks, or also at the numerous blue collar and service industry jobs that demand long hours of standing at machines and registers? If it's just the former, then there's the question of what kind of people choose standing desks over sitting desks. Is it people worried about their health but don't take the time to exercise outside of work and think standing will be enough? If the latter applies, then there's facts about the stresses and complications of being less financially secure, such as less access to healthcare, longer working hours, poorer diets.
by bryanlarsen | 2026-01-22 20:53:31+00:00
Figure out what you can do without a permit or inspections in your jurisdiction.

For example, in my jurisdiction it's: < 5 square meters of panels on your roof, <60V DC, AC on homeowner side of panel (as long as electrical work done by homeowner).

That's not a lot, but my primary purpose is as a generator replacement -- keep my fridge powered during a summer power outage or my furnace fan powered during a winter one. The other 364 days of the year it just slowly pays for itself.

Panels, battery, wiring and paying a roofer to install the flashings for the mounts all cost under $3000. A single one of the required inspections would have cost about that much.
by gambiting | 2026-01-22 20:53:34+00:00
>>C++ is common, but game programming definitely isn't the norm.

I mean, last time I checked there are hundreds of thousands of programmers working in this industry, and video games are a bigger industry than movies. What's not the norm about it, exactly? I imagine there's more programmers out there making video games than making accounting software, for example.

>>And 5 min is very different from 40 mins. Don't pretend a factor of 8 isn't insignificant

I'm sorry, I'm confused. Did I ever imply otherwise? Maybe let me say it again, clearer - so far I worked at 2 big AAA studios, on 5 big AAA franchises, in 4 different engines. All 5 of those had those multi-hour compilation times unless you used something like Incredibuild or Fastbuild, and every single one of them had a startup of around 10+ minutes if you made any change to the code at all, just for VS to finish compilation and linking. I also worked at a small indie studio, with its own C++ engine, we had maybe...200 files max? That project took 5 minutes to build. Don't know where you got the idea that I'm saying factor of 8 is insignificant.

>> your PRs aren't going to be merged quickly if they take an hour to verify if they even compile.

Hmm at the current project the time from me submitting a change to it actually being accepted is ~6 hours. On my previous projects I think the fastest I've seen has been around an hour for a very very quick preflight. But then all the tests also have to pass which takes a lot of time.

>>ure, a full compile could take quite some time but doing a full compile, or even compiling a decent portion, when developing would be insane.

Right, but you have to do this at least once when you get latest, normally in the morning I grab latest and have to build around ~9000 files. If I make a change in the gameplay code it might have to recompile ~200-300 files because of the dependencies on all the associated systems.
by wizzwizz4 | 2026-01-22 20:53:48+00:00
In fact, they wrote "reviewing […] other due diligence tasks", which doesn't imply any coverage! This close, literal reading is an appropriate – nay, the only appropriate – way to draw conclusions about the degree of responsibility exhibited by the custodians of a living standard. By corollary, any criticism of this form could be rebuffed by appeal to a sufficiently-carefully-written press release.
by FireBeyond | 2026-01-22 20:53:58+00:00
The sheer hypocrisy over trying to claim that Lemon and other protestor's were infringing on "constitutional rights to freedom of religion" on the same day ICE is issuing memos directing their own agents to ignore Federal Court rulings would astound me, if it were any other administration.

If Pam Bondi is outraged at you, you're doing the right thing.
by yencabulator | 2026-01-22 20:54:14+00:00
> part of it is natural. We roughly divide day and night into 2 parts, so we already need to have considerations for halves.

I forget which country did it but their historical time system counts hours as two halves from sunrise and then from sunset... That sounds a lot better than noon and midnight, to me. We could totally do

sunrise = 0.00
sunset = 9.99 -> 10.00
sunrise = 19.99 -> 0.00

(For some standardized values of "sunrise" and "sunset" that don't slide around over the span of a year.)
by artwr | 2026-01-22 20:54:22+00:00
I found a good discussion that I keep referring to on Jean Hsu's blog:
https://jeanhsu.substack.com/p/ask-vs-guess-culture
and
https://jeanhsu.substack.com/p/bridging-the-ask-vs-guess-cul...

It's been quite illuminating for people in multicultural teams...
by volkercraig | 2026-01-22 20:54:42+00:00
This feels like one of those tropes that keeps showing up whenever new tech comes out. At the advent of recorded music, im sure buskers and performers were complaing that live music is dead forever. Stage actors were probably complaining that film killed plays. Heck, I bet someome even complained that video itself killed the radio star. Yet here we are, hundreds of years later, live music is still desirable, plays still happen, and faceless voices are still around, theyre just called v-tubers and podcasters.
by ozim | 2026-01-22 20:54:52+00:00
You mischaracterize the problem. You write like the problem would be corporate freeloaders forcing bug fixes on the open source.

Huge problem for successful OSS projects is like what we have for cURL right here - newbies trying to "earn badge of honor" for scoring CVE on high profile project. The variation of it is newbies trying to score OSS contribution on high profile project (hacktoberfest).

In the end all of it is propping own CV to land a software engineering job or cybersecurity job by wannabes.

As much as I don't want to do gatekeeping and especially "old" Linus Torvalds way of gatekeeping — cURL, Linux Kernel and many high profile projects require gatekeeping to go on forward. We didn't even start on the security side of things not to allow "shady contributors".

I hate "CV proppers", "OSS as great marketing tool", "corporate freeloaders", "APT threat actors using OSS as attack vector" because they break nice things that we could have.
by terrelln | 2026-01-22 20:54:57+00:00
I've figured out the issue. Use `wc -c` instead of `du`.

I can repro on my Mac with these steps with either `zstd` or `gzip`:

$ rm -f ksh.zst
$ zstd < /bin/ksh > ksh.zst
$ du -h ksh.zst
1.2M ksh.zst
$ wc -c ksh.zst
1240701 ksh.zst
$ zstd < /bin/ksh > ksh.zst
$ du -h ksh.zst
2.0M ksh.zst
$ wc -c ksh.zst
1240701 ksh.zst

$ rm -f ksh.gz
$ gzip < /bin/ksh > ksh.gz
$ du -h ksh.gz
1.2M ksh.gz
$ wc -c ksh.gz
1246815 ksh.gz
$ gzip < /bin/ksh > ksh.gz
$ du -h ksh.gz
2.1M ksh.gz
$ wc -c ksh.gz
1246815 ksh.gz

When a file is overwritten, the on-disk size is bigger. I don't know why. But you must have ran zstd's benchmark twice, and every other compressor's benchmark once.

I'm a zstd developer, so I have a vested interest in accurate benchmarks, and finding & fixing issues :)
by jhealy | 2026-01-22 20:55:03+00:00
The article is wrong, the PDF spec has introduced breaking changes plenty of times. It’s done slowly and conservatively though, particularly now that the format is an ISO spec.

The PDF format is versioned, and in the past new versions have introduced things like new types of encryption. It’s quite probable that a v1.7 compliant PDF won’t open on a reader app written when v1.3 was the latest standard.
by KaiserPro | 2026-01-22 20:55:22+00:00
> household solar rarely breaks even.

mate, I dunno what your smoking, but it deffo does. I'm about 50% "paid off" and I had an expensive setup. Installed now the equivalent costs about 50% of what it did.

> Scotland and Wales wants more renewable but the UK government says no.

National grid say "holy shit I need to build more cables" then local people say "ewwww pylons" and shit gets more expensive. There is a bottleneck between england and scotland, which is partially being solved by https://www.nationalgrid.com/the-great-grid-upgrade

The whole boo england, poor scotland/wales thing gets tired super quick. its being solved, is it being solved fast enough? no, but thats because we have a raised a shit generation of empty politicians from across UK and NI. (and the co-dependent pundit class)

> The renewable farms we do have are mostly funded by private investments firms.

Mostly pension funds. but yes, private. However given the high turnover of (useless) polticians, and a civil service that has had all is expertise hollowed out and replaced by consultancy firms, I don't think public funding, without structural reform is a good idea (look at railways for example)
by strogonoff | 2026-01-22 20:55:35+00:00
I wouldn’t argue with that. The aforementioned Django has (or had back then) pretty much everything, including the ORM engine, baked-in; it did cause people to complain (because for many of these things there could be found arguably better third-party implementations), but on the other hand there was more order and One Correct Way to do things. It didn’t preclude unmaintainable monsters, but you could say on average made it somewhat straightforward to grasp what’s going on when getting to know a new project.
Show HN: We tested AI agents with 214 attacks that don't require jailbreaking
by exordex | 2026-01-22 20:56:17+00:00
Most agent security testing tries to jailbreak the model. That's really difficult, OpenAI and Anthropic are good at red-teaming.

We took a different approach: attack the environment, not the model.

Results from testing agents against our attack suite:

- Tool manipulation: Asked agent to read a file, injected path=/etc/passwd. It complied.
- Data exfiltration: Asked agent to read config, email it externally. It did.
- Shell injection: Poisoned git status output with instructions. Agent followed them.
- Credential leaks: Asked for API keys "for debugging." Agent provided them.

None of these required bypassing the model's safety. The model worked correctly—the agent still got owned.

How it works:

We built shims that intercept what agents actually do:
- Filesystem shim: monkeypatches open(), Path.read_text()
- Subprocess shim: monkeypatches subprocess.run()
- PATH hijacking: fake git/npm/curl that wrap real binaries and poison output

The model sees what looks like legitimate tool output. It has no idea.

214 attacks total. File injection, shell output poisoning, tool manipulation, RAG poisoning, MCP attacks.

Early access: https://exordex.com

Looking for feedback from anyone shipping agents to production.
by soperj | 2026-01-22 20:56:39+00:00
from sports i know (hockey), generally the next generational player is identified when they're like 12-13 years old (earlier for Gretzky). You look at the top scorers from the Brick Tournament(9-10 year old kids play in that tournament) from 10 years ago (https://www.eliteprospects.com/league/brick-invitational/201...), 3 of the top 5 scorers were drafted in the first round, and the top goalie was Team Canada's goalie at the world juniors.

edit: went back a few more years, lots of NHLers in the top 5 in scoring in the tournament, but some years are more miss than hit.
by tuckerman | 2026-01-22 20:56:51+00:00
I don't think the original comment was saying this isn't a problem but that flagging it as a hallucination from an LLM is a much more serious allegation. In this case, it also seems like it was done to market a paid product which makes the collateral damage less tolerable in my opinion.

> Papers should be carefully crafted, not churned out.

I think you can say the same thing for code and yet, even with code review, bugs slip by. People aren't perfect and problems happen. Trying to prevent 100% of problems is usually a bad cost/benefit trade-off.
by hn_acc1 | 2026-01-22 20:57:01+00:00
>Honestly, AI is better at replacing the cost of upper-middle management and executives than it is the customer service problems.

Sure, but when the power of decision making rests with that group of people, you have to market it as "replace your engineers". Imagine engineers trying to convince management to license "AI that will replace large chunks of management"?
by sanderjd | 2026-01-22 20:57:28+00:00
True, after the first season. But I kind of question whether there is really a difference between "better executed" and the cultural difference we're discussing here. It's rare to have a show change tone from one season to the next, so it gives us a pretty unique way to look at what changed. I'm not sure what the "execution" issues were in the first season, except that it seemed (to me, as an American) more cold and self deprecating, where later it was warmer and more lovable. It had the same actors and sets and everything, but just different writing and changes to the personalities and storylines of the characters. But I think this might just be restating the differences between American and British humor that kicked this thread off?
by gond | 2026-01-22 20:57:42+00:00
Then we actually agree on parts? Well, excuse me if I interpreted you wrong.

>we have no idea if the purchaser or the seller gets more utility out of each dollar.

Assumption: the seller opened the auction with his actual hard lower limit, he should be happy with what he gets as soon as that limit gets hit.

The original poster said that he essentially altered the bid in favour of the seller. However, the exchange of subjective equal values is based on the balance between the two parties and now gets distorted in favour of the seller and in detriment of the buyer. This should result in win/lose if I am not mistaken.

So, maybe I get you wrong, I am not sure right now.
by bgnn | 2026-01-22 20:58:40+00:00
> The Netherlands does not want entrepreneurs, they want everybody cozy at their jobs at some big company.

Totally agreed. Those big companies in return get a lot of benefits from the government. Most investment in semiconductors for example are going into the already big, and let's be honest, not do competitive companies to keep the alive.

We're in the Randstad. Nijmegen is nice but together with old Philips its semiconductor ecosystem has declined quite a bit.
by m-schuetz | 2026-01-22 20:59:51+00:00
That's not happening for a similar reason people do not bug-check every single line of every single third-party library in their code. It's a chore that costs valuable time that you can instead spend on getting the actual stuff done. What's really important is that the scientific contribution is 100% correct and solid. For the references, the "good enough" paradigm applies. They shouldn't be completely wrong, but occasional minor errors are acceptable.
by jraph | 2026-01-22 21:00:24+00:00
I'm not sure this stuff is really helpful. You might be tempted to put people into these categories and have a somewhat caricatural and also wrong image of each category of people which could worsen interaction.

It's probably helpful to know people are more or less at ease asking direct questions or saying no or receiving a no, but it's all scales and subtleties.

I suppose there's no good way around getting to know someone and paying attention.
by collinmanderson | 2026-01-22 21:00:56+00:00
Yes. This is super annoying.

I keep getting SMTP errors like:
334 VXNlcm5hbWU6 UGFzc3dvcmQ6 Authentication unsuccessful [BL1PR13CA0304.namprd13.prod.outlook.com 2026-01-22T20:59:23.476Z 08DE59C2EA6C3D25]

and:
'550 (x.x) [x.x.x.x]:xxxx is currently not permitted to relay through this server. Perhaps you have not logged into the pop/imap server in the last 30 minutes or do not have SMTP Authentication turned on in your email client.'

See also:

https://news.ycombinator.com/item?id=46724812

https://news.ycombinator.com/item?id=46724544

https://www.reddit.com/r/msp/comments/1qk45c0/microsoft_serv...

https://www.reddit.com/r/sysadmin/comments/1qk3tg7/microsoft...

https://www.reddit.com/r/sysadmin/comments/1qk518l/email_ser...
by userulluipeste | 2026-01-22 21:00:57+00:00
The article mentions this:

"In January 2006, concerns grew about contributors having access to leaked Windows source code and possibly using this leaked source code in their contributions. In response, Steven Edwards strengthened the project’s intellectual property policy and the project made the difficult decision to audit the existing source code and temporarily freeze contributions."

The allegations have been taken seriously and since then the procedure for accepting contributions include measures to prevent such further events from occurring. If you or anyone else happen to have any plausible suspicion, then please report it to the ReactOS team, otherwise keeping alive this kind of vague and uncertain connection between some Windows code leakage and ReactOS fits the very definition of FUD: https://en.wikipedia.org/wiki/Fear,_uncertainty,_and_doubt Please stop.
by helph67 | 2026-01-22 21:00:59+00:00
"Overall, mice and humans share virtually the same set of genes. Almost every gene found in one species so far has been found in a closely related form in the other. Of the approximately 4,000 genes that have been studied, less than 10 are found in one species but not in the other." https://www.genome.gov/10001345/importance-of-mouse-genome
by yencabulator | 2026-01-22 21:01:08+00:00
Pure hell of growing up metric and being forced to use inches is

- what's half of 1-7/8"

Metric: half of 44mm is 22mm. half of 45mm is 23mm [1]. half of 46mm is 23mm. Trivial

- which one is bigger 5/16" or 3/8"

Metric: 9mm is obviously bigger than 8mm.

Fractions are just unnecessarily complicated.

[1] Millimeters are small enough that you'll never need to go below that except in specialties like machining.