MurphyA/hacker-news huggingface dataset:
by ben_w | 2026-01-12 21:59:39+00:00
Just to add to what I already wrote on a repost of this (https://news.ycombinator.com/item?id=46594401):

Ages ago, I wrote that I was never a fan of the term "singularity" in the context of AI. When mathematical singularities pop up in physics, it's usually a sign the physics is missing something.

Instead, I like to think of the AI "event horizon", the point in the future, one that always seems like it's ahead of you no matter how close you get, and beyond which you can no longer predict what happens next.

Obviously that will depend on how much attention any given person is paying to the developments in the field (and I've seen software developers surprised by Google Translate having an AR mode a decade after the tech was first demonstrated), but there is an upper limit even for people who obsessively consume all public information about a topic: if you're reading about it when you go to sleep, will you be surprised when you wake up by all the overnight developments?

Well, your last edit to that repo was the day after I posted it was beyond current AI.

(And sure, I had all of Linux in mind, not just a POC, and you're directly open about it not even being fully tested, and the person I was replying to four days ago also said "that basically isn’t Linux since LLM are trained on said the source code" which I can't confirm or refute, but what I do see… is more than I was expecting the current SOTA to be coherent over).
by jackfranklyn | 2026-01-12 22:00:21+00:00
The DoorDash pizza arbitrage comparison is apt. Both cases expose the same fundamental thing: venture-subsidised pricing creates artificial market conditions that clever people will exploit.

What I find interesting is how long these windows stay open. You'd think someone at Stamps.com or UPS would notice the pricing anomaly, but large organisations are often too siloed. The team setting international rates probably doesn't talk to whoever monitors small parcel economics.

The author mentions making a few hundred dollars - but the real question is scalability. At what volume does this become attractive enough for the postal services to close the loophole? There's probably a sweet spot between "not worth their attention" and "actually profitable."
by keybored | 2026-01-12 22:00:40+00:00
> Yes, there are security risks and all but honestly this is the future.

That’s it? There are security risks but The Future? On the one hand I am giving it access to my computer. On the other hand I have routine computer tasks for it to help with?

Could these “positive” comments at least make an effort? It’s all FOMO and “I have anecdotes and you are willfully blind if you disagree”.
by michalc | 2026-01-12 22:01:35+00:00
Short answer is no, not as far as I am aware/can reason about it

In more detail: so by my understanding there are two techniques in making zip bombs…

Firstly nested ZIPs that leverage the fact that some unZIP programs recursively extract member files. stream-unzip doesn’t do this (Although you could probably use stream-unzip as a component in a vulnerable recursive ZIP parser if you really wanted to… but that I would argue is not the responsibility of stream-unzip)

The second technique is overlapping member files, but this depends on them overlapping as defined by the central directory at the end of the ZIP, which stream-unzip does not use

But if you are accepting files from an untrusted source, then you should validate the size of the uncompressed data as you unZIP (which you can do as you validate along with any other properties of the data)
by dyingkneepad | 2026-01-12 22:01:43+00:00
It all started when I bought a stationary bike at C*co with the goal of doing it twice per week for 10 minutes each session. I knew if I had bigger plans, I would end up not doing it.

So after those sessions became routine, I increased to 15 minutes, then 3x per week, then changed from time-based to distance-based, etc. etc. Every time I pushed the boundary and saw myself not doing it anymore, I went back.

Most people would still describe me as sedentary, but I'm already much better than what I was earlier.
by ejpir | 2026-01-12 22:01:49+00:00
cool tool, thanks! Was wondering if I was using the 5x well :) 2026-01-03

│ Total │ │ 2,102,742 │ 622,848 │ 78,507,465 │ 1,670,798,000 │ 1,752,031,055 │ $1283.69 │
by StoneAndSky | 2026-01-12 22:02:01+00:00
Thanks to Roberts and McConnell, the United States has a Presidential "Purge" window:

The President can "officially" suborn the murder of anyone, and as long as there is insufficient time for an impeachment trial or he leaves office before the act is discovered or he is charged with impeachment, cannot be held accountable for it by any means.
by rynn | 2026-01-12 22:02:18+00:00
9 years into transformers and only a couple years into highly useful LLMs I think the jury is still out. It certainly seems possible that some day we'll have the equivalent of an EDR or firewall, as we do for viruses and network security.

Not perfect, but good enough that we continue to use the software and networks that are open enough that they require them.
by smusamashah | 2026-01-12 22:02:44+00:00
Please make the background fully black. I am trying to bore to sleep and the background is bothering me a bit in the dark room. Also, add a full screen button so that I don't see anything on my phone at all except the words appearing slowly. May be even remove the next button and go to next part on touch. Also may be the words should appear slower too.
by DoctorOetker | 2026-01-12 22:02:48+00:00
You are making assumptions, I was effectively infibulated (by "partial circumcision") after a false diagnosis, age 11, where I clearly conveyed I did not want to before it happened.

I know the name of the urologist.

I go to the hospital as a young adult, made an appointment with another urologist at the same hospital (to prevent myself from ending up in jail).

I ask her to check my medical record, it's not there.

She proposes to check the record under my mother's name: nope, under my stepfather's name: nope, my father's name: nope, and my father didn't even know it happened.

Meanwhile the university had some recent philosophy thesis paper that tried to answer the question why no one in my country has sued any urologist regarding circumcision, their conclusion? some random psychological stuff.

Psychological? the suppression of evidence (or access to the evidence) is not something that happens in my head, but in the real outside world.

I my case I know the name of the urologist, but we are denied access to legal evidence.

And why would they incriminate themselves? its not like they "woops-what-are-my-hands-doing" accidentally put the sample of foreskin in the sterile packaging again boy after boy, and "woops-my-arms-uncrontrollably" put it in their fridge until the medical courier picks it up, and remuneration magically follows without these surgeons understanding what they are doing. Of course they perfectly know what they are doing. It's organised harvesting of foreskin tissue. Why would they incriminate themselves with a paper trail? How naive the rest of society can be: we know these people select their profession because it is an auspicious hidey hole.

And this is in a hospital setting.

Now reread the posted article, every time people argue to only ban religious settings they pretend there is no trauma in hospital settings. The real reason is they want to lucratively harvest the tissues for themselves. It's a limited hang-out every time. Journalists either aren't doing their job, or are being censored by their superiors.
by 8note | 2026-01-12 22:03:43+00:00
i think they're trading future customer acquisition and model quality for the current claude code userbase which they might also lose from this choice.

the reason i got the subscription wasnt to use claude code. when i subscribed you couldnt even use it for claude code. i got it because i figured i could use those tokens for anything, and as i figured out useful stuff, i could split it off onto api calls.

now that exploration of "what can i do with claude" will need to be elsewhere, and the results of a working thing will want to stay with the model that its working on.
by glkindlmann | 2026-01-12 22:04:08+00:00
That's super cool! Thanks for explaining. Just to clarify myself - when I was thinking of automation I was not thinking of AI, or at least not how its popularly understood these days. I was thinking more like how 2D mazes can be automatically made by non-AI methods. Uncrossy would need a kind of constraint solver that can navigate words lexically and the spatial intersection of words (and their possible slides). I'm certainly not telling you anything you don't know. There are some algorithms for these (general) kinds of constraint satisfaction problems and they long pre-date "AI", but I think the application to uncrossy and refinement would be quite challenging.
by thebruce87m | 2026-01-12 22:04:14+00:00
My night tariff is 6.67p/kWh compared to 28.36p/kWh for daytime.

I don’t think these differentials will last either but I do like the idea of smart charging when there is too much wind. I suspect these grid storage systems currently being built won’t handle these peaks and will be designed for the average case so there will still be periods of cheap electricity.

My supplier already controls my car this way and charges it on a schedule it defines each night and also ad-hoc during low demand.

There is also some benefit to have a backup system for when the power goes out which happens a few times a year.
by sebasv_ | 2026-01-12 22:04:20+00:00
I see at least 2 axes here:
* Should access to a tool be restricted of it is used for malice
* Is a company complicit if its automated service is being used for malice

For 1, crowbars are generally available but knives and guns are heavily regulated in the vast majority of the world, even though both are used for murder as well as legitimate applications.

For 2, things get even more complicated. Eg if my router is hacked and participates in a botnet I am generally not liable, but if I rent out my house and the tenant turns it into a weed farm i am liable.

Liability is placed where it minimises perceived societal cost. Emphasis on perceived.

What is worse for society, limiting information access to millions of people or allowing csam, harrassment and shaming?
by theshrike79 | 2026-01-12 22:05:02+00:00
It's not like testing code is a new thing. Junit is almost 30 years old today.

For functionality: https://en.wikipedia.org/wiki/Unit_testing

With robust enough test suites you can vibe code a HTML5 parser

- https://ikyle.me/blog/2025/swift-justhtml-porting-html5-pars...

- https://simonwillison.net/2025/Dec/15/porting-justhtml/

And code correctness:

- https://en.wikipedia.org/wiki/Tree-sitter_(parser_generator)

- https://en.wikipedia.org/wiki/Roslyn_(compiler)

- https://en.wikipedia.org/wiki/Lint_(software)

You can make analysers that check for deeply nested code, people calling methods in the wrong order and whatever you want to check. At work we've added multiple Roslyn analysers to our build pipeline to check for invalid/inefficient code, no human will be pinged by a PR until the tests pass. And an LLM can't claim "Job's Done" before the analysers say the code is OK.

And you don't need to make one yourself, there are tons you can just pick from:

https://en.wikipedia.org/wiki/List_of_tools_for_static_code_...
by hackernudes | 2026-01-12 22:05:09+00:00
Context: https://www.cisecurity.org/cis-benchmarks, https://www.cisecurity.org/about-us

"""The CIS Benchmarks® are prescriptive configuration recommendations for more than 25+ vendor product families. They represent the consensus-based effort of cybersecurity experts globally to help you protect your systems against threats more confidently."""
by Analemma_ | 2026-01-12 22:05:26+00:00
I wonder if in the long run this will lead to the ascent of NixOS. They seem perfect for each other: if you have git and/or a snapshotting filesystem, together with the entire system state being downstram of your .nix file, then go ahead and let the LLM make changes willy-nilly, you can always roll back to a known good version.

NixOS still isn't ready for this world, but if it becomes the natural counterpart to LLM OS tooling, maybe that will speed up development.
by jijijijij | 2026-01-12 22:05:41+00:00
Give it a try! Although, I do all my gaming on a Playstation. In Fedora, the Steam and NVIDIA Fusion repos come preinstalled and can be enabled during installation or in Gnome's 'Software' or the package manager later, but I can't speak to that. The opensource AMD drivers are in the main repo no action needed. ROCm too, but that can be messy and is work-in-progress on AMD's side. Can't vouch for the controller, but people claim they work. Guess, that's the live image. I heard, games with anti-cheat engines in the kernel categorically don't work with Linux, but this may change at some point. In that case, or if you want "console mode", a specific gaming distro may be worth considering, otherwise I would stick to vanilla. Good luck! Hope I didn't promise too much ;)
by notherhack | 2026-01-12 22:05:41+00:00
The lowest I found is two clip-on CAT5e cable termination jacks for $0.80 + 0.08 tax. Available in a rainbow of colors and shipped free to Seattle by Sunday if you order in the next 10 hours.
https://www.amazon.com/dp/B08T63ST97

Or 3.5oz filet mignon flavor dog food for $0.84+tax with FREE two day delivery. https://www.amazon.com//dp/B07VBFLCKT

Beat that!
by cogman10 | 2026-01-12 22:05:48+00:00
> unless they had a mechanism for satiation

It ends up being the opposite. Rather than the body having a satiation response, it controls the metabolism.

If you've ever fasted, you've experienced this. You just don't have the energy to do much other than sit around when you are hungry.

Ancient societies realized this, it's why they'd give out calorie dense meals to their farm labor. For a serf in England, harvest time was often met with a very calorie dense meal. For roman soldiers, they had a diet of meats and cheeses.

I'd also point out that you don't need to have exactly 100% daily calorie intake. You can go a week with just 99% and catch up with 101% the next week just fine.
by smsm42 | 2026-01-12 22:06:32+00:00
Injecting Gaza, assault rifles and vague implication of conspiracy (with Jews lurking on the background because you must respect the founding pillars of the genre) into an article that is supposedly about tech startup founder - is exactly what I expect from top ethical journalistic standards. Not.

I mean I get it. Who doesn't have an AI code generation tool now? It's like having a website in the first dotcom boom era (yes, Gandalf, I was there). No pop, no buzz, not hot and juicy enough. But add a little of intifada there, a fight against some murky forces of darkness (that throw hundreds of millions of vc money at the intrepid hero) - and maybe you got something. That's how journalism is done.
by Dylan16807 | 2026-01-12 22:06:33+00:00
> Given an option that is configurable, why would the default setting be the one that increases probability of errors?

They're objecting to the "given", though. They didn't comment either way on what the default should be.

Why should it be configurable? Who benefits from that? If it's to make it so people don't have to type "var mut" then replace that with something shorter!

(Also neither one is more 'correct')
by twosdai | 2026-01-12 22:07:37+00:00
It, the difference between calling child pornographic content cp vs CSAM, is splitting hairs. Call it CSAM its the modern term. Don't try to create a divide on terminology due to an edge case on some legal code interpretations. It doesn't really help in my opinion and is not a worthwhile argument. I understand where you are coming from on a technicality. But the current definition does "fit" well enough. So why make it an issue. As an example consider the following theoretical case:

a lawyer and judge are discussing a case and using the terminology CSAM in the case and needs to argue between the legality or issue between the child being real or not. What help is it in this situation to use CP vs CSAM in that moment. I dont really think it changes things at all. In both cases the lawyer and judge would need to still clarify for everyone that "presumably" the person is not real. So an acronym change on this point to me is still not a great take. Its regressive, not progressive.
by cyberax | 2026-01-12 22:07:46+00:00
> These are influencers who have a stake in Tesla.

I've seen it on multiple forums. Just like a broken record.

> If it's never been cleaned from the inside, it's a good chance it's not.

The camera is clean. I can see that on the dashcam records. And if the system is so fragile that a bit of dust kills it, then it's not good.

The issue with the red-hands-of-death is caused by the forward collision warning, the road there curves and slopes up, so the car gets confused and interprets the car in front as if it's on a collision course. This happens even during manual driving, btw. False FCWs are a common problem, if you check forums, and people are annoyed because it affects their safety score used for Tesla Insurance.

FSD got better than it was 4 years ago. But it's still _nowhere_ near Waymo. You absolutely can not just sit back and snooze while it's driving, you constantly have to be on guard.
by wvenable | 2026-01-12 22:07:49+00:00
This isn't the first time I've said this but also had an early-career job writing Perl code. And I actually got to the point where I liked it -- I mean I could see why it had a following.

Subsequently I've written code in almost every popular programming language and I will frequently go years between languages but even so I have very little trouble picking them back up. Even C++. But not Perl. It's just so weird with so many idiosyncrasies that I just can't remember it.
by qnpnpmqppnp | 2026-01-12 22:08:51+00:00
They are in a duopoly on the Mobile OS market, with no other significant player available. Google would be the sole integrated mobile AI, though there are competitors available if customers wanted to switch (customers for such products being the OS companies buying the AI services, not the end-users).

However I don't see the link, how they are "using their duopoly", and why "they" would be using it but only one of them benefits from it. Being a duopoly, or even a monopoly, is not against anti-trust law by itself.
by ofu997hn | 2026-01-12 22:09:17+00:00
Location: Portland, OR, USA
Remote: Yes
Willing to relocate: Yes
Technologies: JavaScript, C#, SQL, HTML, CSS, React,
GraphQL, .NET, Node, Git, MongoDB, MS SQL
Résumé/CV: see linkedin.com/in/oliverfu
Email: ofu997@gmail.com

Summary: I'm a .NET web developer with 4 YOE and I'm eager to level up in my next role. I build user interfaces and wrangle business logic, queries, and APIs with JavaScript, C#, and SQL. I'm familiar with MVC frameworks, object-oriented programming, and web app architecture. As a passionate and curious developer, I like to mingle with all aspects of stacks. Prefer remote but willing to relocate. Ideally, a role that supports learning, growth, and scaling up.
by WorldMaker | 2026-01-12 22:09:32+00:00
If you are looking for any sort of hope, even a cursed one: there is the perspective that LLM generated code is legacy code as a service. LLMs were trained on a lot other people's legacy code. A lot of "vibe coding" is for what de facto are "day one legacy code apps". If my career has taught me anything, companies will always sunk cost fallacy throw new money at "fixing"/"expanding" legacy apps or the endless "rewrite cycle" of always trying to rewrite legacy apps but never quite succeeding.

Skills like Legacy Code Anthropology and Reverse Engineering will grow into higher demand. Like the worst legacy apps built by junior developers and non-developers (Access/Excel VBA and VB6 alone had a lot of "low code" legacy by non-developers), LLMs are great at "documenting" What was built, but almost never Why or How, so skills like "Past Developer Mind Reading" and "Code Seances" will also be in high demand.

There will be plenty of work still to do "when" everything is vibe coded. It's going to resemble a lot more the dark matter work a lot of software engineering is in big enterprise: fixing other people's mistakes and trying to figure out the best way you can why they made those mistakes so you can in theory prevent the next mistake.

It's a very dark, cursed hope to believe that the future of software engineering is the darkest parts of its present/past. As a software developer who has spent too large of an amount of my career in the VB6 IDE and who often joked that my "retirement plan" was probably going to be falling into an overly-highly-paid COBOL Consultancy somewhere down the line, I'm more depressed that there will be a lot more legacy work than ever, not that there won't be enough work to go around, and it will be some of the ugliest, most boring, least fun parts of my career, forever, and will have even less "cushiness" to make up for it. (That "dream" of a highly paid COBOL Consultancy disappears when good Legacy Code becomes too common and thus the commodity job. Hard to demand slicker, higher salaries when supply is tainted and full.)
by kelipso | 2026-01-12 22:09:41+00:00
I don’t think it can be disputed that there is a lot of propaganda and misinformation in the internet.

One logical conclusion to this would be to protect people from that via censorship.

Many recent examples of the US doing this as well (Covid, Russia, etc.). Of course, the US delegates this to its cooperations, so it can publicly say its hands are clean.

People do remember the Twitter files though, and the US government has massive spying and monitoring capabilities, so its hands are not actually all that clean.
by cestith | 2026-01-12 22:10:00+00:00
I use two 4k displays with an M1 Pro MBP. They work without any flickering. They’re using HDMI rather than DisplayPort.

I’m also, to get the two external displays without them being mirrored, using a docking station and a display driver from Silicon Motion called macOS InstantView.

This is of course not ideal if you need DP and DSC.
by heavyset_go | 2026-01-12 22:10:49+00:00
If you aren't blocking your browser from allowing sites to call to local services, you should:

> Network Boundary Shield

> The Network Boundary Shield (NBS) is a protection against attacks from an external network (the Internet) to an internal network - especially against a reconnaissance attack where a web browser is abused as a proxy.

> The main goal of NBS is to prevent attacks where a public website requests a resource from the internal network (e.g. the logo of the manufacturer of the local router); NBS will detect that a web page hosted on the public Internet is trying to connect to a local IP address. NBS only blocks HTTP requests from a web page hosted on a public IP address to a private network resource; the user can allow specific web pages to access local resources (e.g. when using Intranet services).

https://jshelter.org/nbs/
by zjzkshz | 2026-01-12 22:11:10+00:00
> There's also not much evidence that any major government in the world wants Iran toppled

I’m sorry what? Maybe this is an argument over terminology, but Israel absolutely wants Iran toppled in any colloquial definition of the word. This has been their stated goal since the 90s. And much of their activity in the Middle East since then is towards this goal.

> and especially Israel --- which has basically depantsed the IRGC --- don't actually have much to gain

Again I’m sorry what? Iran has been a major deterrent to their regional hegemony for decades. Remove US support and Israel is destroyed. They need these threats removed so they can end their reliance on US support.