MurphyA/hacker-news huggingface dataset:
by zigzag312 | 2026-01-21 15:12:24+00:00
> which can be done fast enough to appear instant on the CPU

Big scanned PDFs can be problfrom more efficient processing (if it had HW support for such technique)

> Your link shows CRC32 at 7963.20 MiB/s (~7.77 GiB/s) which indicates it's either very old or isn't measuring pure CRC32 throughput

It may not be fastest implementation of CRC32, but it's also done on old Ryzen 5 3350G 3.6GHz. Below the table are results done on different HW. On Intel i7-6820HQ CRC32 achieves 27.6 GB/s.

> measures 85 GB/s (GB, GiB, eh close enough) on the Apple M1. That's fast enough that I'm comfortable calling it limited by memory bandwidth on real-world systems.

That looks incredibly suspicious since Apple M1 has maximum memory bandwidth of 68.25 GB/s [1].

> I have personally seen bitrot and network transmission errors that were not caught by xxhash-type hash functions, but were caught by higher-level checksums. The performance properties of hash functions used for hash table keys make those same functions less appropriate for archival.

Your argument is meaningless without more details. xxhash supports 128 bits, which I doubt wouldn't be able to catch an error in you case.

SHA256 is an order of magnitude or more slower than non-cryptographic hashes. In my experience archival process usually has big enough effect on performance to care about it.

I'm beginning to suspect your primary reason for disliking xxhash is because it's not de facto standard like CRC or SHA. I agree that this is a big one, but you constantly imply like there's more to why xxhash is bad. Maybe my knowledge is lacking, care to explain? Why wouldn't 128 bit xxhash be more than enough for checksums of files. AFAIK the only thing it doesn't do is protect you against tampering.

> I don't know what kopia is, but according to your link it looks like their wire protocol involves each client downloading a complete index of the repository content, including a CAS identifier for every file. The semantics would be something like Git? Their list of supported algorithms looks reasonable (blake, sha2, sha3) so I wouldn't have the same concerns as I would if they were using xxhash or cityhash.

Kopia uses hashes for block level deduplication. What would be an issue, if they used 128 bit xxhash instead of 128 bit cryptographic hash like they do now (if we assume we don't need to protection from tampering)?

[1] https://en.wikipedia.org/wiki/Apple_M1
by CodeMage | 2026-01-21 15:13:28+00:00
"We can fix it later" is not the staple of Marketing Driven Development. It's not why Windows has been getting more user-hostile and invasive, why its user experience has been getting worse and worse.

Enshittification is not primarily caused by "we can fix it later", because "we can fix it later" implies that there's something to fix. The changes we've seen in Windows and Google Search and many other products and services are there because that's what makes profit for Microsoft and Google and such, regardless of whether it's good for their users or not.

You won't fix that with AI. Hell, you couldn't even fix Windows with AI. Just because the company is making greedy, user-hostile decisions, it doesn't mean that their software is simple to develop. If you think Windows will somehow get better because of AI, then you're oversimplifying to an astonishing degree.
Show HN: yolo-cage – AI coding agents that can't exfiltrate secrets
by borenstein | 2026-01-21 15:13:29+00:00
I made this for myself, and it seemed like it might be useful to others. I'd love some feedback, both on the threat model and the tool itself. I hope you find it useful!

Backstory: I've been using many agents in parallel as I work on a somewhat ambitious financial analysis tool. I was juggling agents working on epics for the linear solver, the persistence layer, the front-end, and planning for the second-generation solver. I was losing my mind playing whack-a-mole with the permission prompts. YOLO mode felt so tempting. And yet.

Then it occurred to me: what if YOLO mode isn't so bad? Decision fatigue is a thing. If I could cap the blast radius of a confused agent, maybe I could just review once. Wouldn't that be safer?

So that day, while my kids were taking a nap, I decided to see if I could put YOLO-mode Claude inside a sandbox that blocks exfiltration and regulates git access. The result is yolo-cage.

Also: the AI wrote its own containment system from inside the system's own prototype. Which is either very aligned or very meta, depending on how you look at it.
by komali2 | 2026-01-21 15:13:30+00:00
In Taiwan you can be on NHI within 6 months of arrival on certain visas. Once you get permanent residency, you're always eligible so long as you keep making monthly payments, which cap out at around 45$usd/month. NHI makes an MRI cost less than 100$ usd. If you don't have NHI you can pay iirc 300$ for an MRI, 100$ for an emergency room visit with blood draw and IV, maybe ~30$/month for buproprion over the counter.
by triceratops | 2026-01-21 15:13:47+00:00
> E.g., if everyone was white, there’d be no hand-wringing over white supremacy... Don’t be dense just to make a point.

You think people didn't find other ways to dislike each other when they were all "white"? Like I already said you don't know history very well or you're the one being "dense to make a point".

> If it’s a valid classification today why can’t we use the same term retrospectively?

I can't speak for today or say if it's valid. But that's not how things were back then because the people themselves didn't believe that. You've never heard the slurs people used for different ethnic and religious groups that all hailed from Europe and had light skin? The amount of "hand-wringing" about JFK being the first non-Protestant president? There was no feeling of "homogeneity" back then either based solely on skin color.
by Dev_Master | 2026-01-21 15:14:12+00:00
RiskScan PRO is a desktop file/folder risk assessment tool built with Python.
It uses heuristic scoring (file type, size, name, location), maps findings to MITRE ATT&CK techniques, and assigns a confidence score rather than binary malware verdicts.

Features include real-time scan progress with ETA, interactive results (copy path / open file or folder), and report export to JSON, TXT, or PDF. Designed as a lightweight analyst-style triage tool rather than a signature-based AV.

Looking for feedback from security engineers and reverse engineers on the heuristics, UX, and whether this approach is useful in real workflows.
by alephnerd | 2026-01-21 15:14:19+00:00
> Some data sharing arrangement can be generated...

The EU and India are starting to work on formalizing a data transfer mechanism similar to the EU-US Data Transfer Mechanism (DTM) as part of the EU-India TTC [0] (a US-EU TTC was a a precursor to formalizing the EU-US DTM).

Depending on how the EU-India FTA shakes out (signing after Republic Day on January 27th), it might make it easier to "India-wash" American services exports (which is already what is happening).

The fact that an EU "sovereign" cloud like STACKIT is using American-Israeli security software [1] (though they did open an office in Prague to outsource some development, but is largely done in Israel I believe) and Google Workspaces [2] as part of it's sovereign cloud initiative highlights how it's all HN bark with little-to-no bite.

That said, kudos to SpaceTime [3] for trying to leverage the momentum to build a GTM channel via NukeProof.

[0] - https://in.boell.org/en/2025/05/27/tapping-momentum-eu-india...

[1] - https://www.sentinelone.com/press/sentinelone-and-schwarz-di...

[2] - https://gruppe.schwarz/en/press/archive/2024/companies-of-sc...

[3] - https://spacetime.eu/blog/nuke-proof-alliance-launches-to-br...
by goku12 | 2026-01-21 15:14:31+00:00
Sure! They all have overinflated egos that're propped up by PR shenanigans and doesn't match their demonstrated achievements. But their opinions are more likely their aspirations rather than oversimplifications.

What follows is my gut feeling from observing their public interactions. So take it with as much salt as you like. At this point I'm confused as to whether they're motivated by wealth (greed) or by the suffering they inflict while amassing it (misanthropy). If you carefully observe the interviews of the broligarchs and some others in power, you'll notice that they're genuinely happy and excited to discuss plans and activities that cause widespread misery, pain or even death. I can give you numerous examples of such instances, but this will probably seem eerily familiar to you too. Even this story is one such example.

It's as if multiple people bullied or abused them in their childhood and now they're out to prove their superiority and importance and show humanity its place. It's like a super villain revenge fantasy. I know that at least a few individuals among them does have such a dark history. But this behavioral pattern in pervasive among them.
by raw_anon_1111 | 2026-01-21 15:15:11+00:00
The press has never been believable. How many innocent people were beat, framed and shot and the press just took the word of the police? Rappers in the 80s were talking about police brutality. But no one believed them until the Rodney King video in 1992. Now many don’t instinctively trust the police because everyone has a camera in their pocket and publish video on social media.

On the other side of the coin, the press and both parties ignored what was going on in rural America until the rise of Trump
by dzink | 2026-01-21 15:15:23+00:00
Think back to Maya history when the rulers kept astronomy knowledge secret to pretend they were Gods and had control over celestial objects. If expensive education and publishing access provides power to someone and free education and publishing becomes a thread to their authority, that’s not a good testimony on how they used their education advantage while they had it.

AI may be destroying truth by creating collective schizophrenia and backing different people’s delusions, or by being trained to create rage-bait for clicks, or by introducing vulnerabilities on critical software and hardware infrastructure. But if institutions feel threatened, their best bet is to become higher levels of abstraction, or to dig deeper into where they are truly deeply needed - providing transparency and research into all angles and weaknesses and abuses of AI models. Then surfacing how to make education more reliably scalable if AI is used.
by DocTomoe | 2026-01-21 15:15:39+00:00
> According to Ortiz, the convention is a sacred place she didn’t want to see desecrated by AI.

Maybe tone down the religious framing of what is essentially a cashgrab show for the industry. Also: Does that AI ban apply to e.g. Disney in its entirety? Because if it does, it'll be a very small and pretty bleak Comic Con this year.
by seec | 2026-01-21 15:15:40+00:00
Stereotypes exist for a reason.
It would be stupid to argue that every single Russian is exactly like that. But at the same time you'll find those traits exhibited in a lot of Russians at various levels of seriousness.

Being bigoted is also pretending that tribes/cultures do not share patterns and behavior.
Individuals are unique, but they exist as part of a group. When you talk about the group, you necessarily need to make shortcuts and synthesize.

I'm pretty sure that when you talk about dogs, you'll attribute specific behaviors to specific races. But now it is not politically correct to think humans are the same, even though it is scientifically provable.
by bluecalm | 2026-01-21 15:15:44+00:00
>>If dealing with VAT is a large problem for your business today

It's not a problem for me today. It was a big problem when I had no revenue, needed to do all the paperwork, meet ridiculous local accounting requirements connected to selling software in a different currency than my local one, write code, setup licensing, shipping the software to the clients etc.

It was a major source of stress and sleepless nights for me.

>>But even without those 3rd party solutions, I think the complexity is vastly oversold, it's relatively easy to get right compared to other regulations. Maybe I'm just EU-damaged already though, YMMV.

It's easy when you have done it once and know the process.
It's not so easy when you need to understand if your product meets a definition of an electronic service or something else, when accountants you are meeting don't know how to setup VAT-MOSS thing because it's still rare or when you need to add your tax authority about something and their reply is that they don't know so you need to write an official inquire (that requires a lawyer) so you can get your answer in a few months.

When I was setting a new company in another country it was easier for me because I already knew how the process work and I could hire a competent accountant before the new company had any revenue. It wasn't so simple when I had 0 capital and just wanted to ship software to see if people want to buy it.
by komali2 | 2026-01-21 15:15:47+00:00
I thought fuck-you money also included the ability to explore whatever you want in a way that included e.g. hiring a team to explore projects for you as startups?

Also everyone I know with fuck you money already lives in Asia for cost of living reasons, but spends half the year jet setting to various raves and rich people shenanigans in random places like Croatia.
by Majromax | 2026-01-21 15:16:03+00:00
I wonder if a breakpoint was out-of-order execution. Many computations would use some values from memory plus other that could be computed, and out-of-order execution would allow the latter to proceed while waiting on memory for the former. That would improve utilization and be a 'win' even if the recomputation in isolation would be no faster than the memory load.
by pixl97 | 2026-01-21 15:16:03+00:00
>Is tech really that relatively cushy?

Just wait till there is more supply than demand in programmers/tech. Then you'll learn how much the rest of the world sucks.

A lot of us here are earning in the top few percent of our countries households and we don't have to deal with any of the bullshit that people making 1/4th we do or less.
by gbanfalvi | 2026-01-21 15:16:08+00:00
> Having large bureaucratic organizations

Yes, that's what the paper argues. Institutions at every scale (say, doctor's clinics, hospitals, entire healthcare systems) are very challenging to access compared to me asking ChatGPT. And it's not just the bureaucracy, but there's time, money and many other intangible costs associated with interacting with institutions.

> [Large bureaucratic organizations]that run everything and aren't held accountable

But they ultimately are. People from all types of institutions are fired and systems are constantly reorganized and optimized all the time. Not necessarily for the better -- but physical people are not black boxes spewing tokens.

Individuals' choices are ultimately a product of their knowledge and their incentives. An MLM's output is the result of literal randomness.

> run the world breaking up families, freedom, and fun

There's lots of terrible institutions vulnerable to corruption and with fucked up policies, but inserting a black box into _can't_ improve these.

> where truth is determined by policy

The truth is the truth. Regardless of what policy says. The question is, do you want to be able to have someone to hold accountable or just "¯\_(ツ)_/¯ hey the algorithm told me that you're not eligible for healthcare"
by embedding-shape | 2026-01-21 15:16:17+00:00
> If the Estonian company is supposed to be considered a separate legal person based in Estonia, it shouldn't have to deal with anything Spanish.

If the Estonian company has employed a person located in Spain, shouldn't the laws of both countries apply to this employment then? The employee lives in Spain, so obviously Spanish labor laws should be followed, and the company is in Estonia, so obviously Estonian law should apply.

I'm not sure why the Estonian company wouldn't have to follow Spanish law if they've decided to employ a Spanish person? What laws should cover the person living in Spain, Estonian laws, although they don't live there?
by TheOtherHobbes | 2026-01-21 15:16:30+00:00
Photography, computer graphics, Photoshop, synthesizers, samplers, and others have all been considered "not real art."

The irony is that the kind of genre art you see at Comic-Con is mostly reproductions of commercial properties or standard tropes and formulas, with very little original vision and creativity. Being able to draw something recognisable as [genre character name goes here], even with some skill, is not that high a bar, and it lives in a tiny niche in the art world as a whole.

AI brought something fresh to art for a while, but now I think creative people are more aware of the limitations. It's in a strange mid-way place between being fascinating, and being frustratingly limited compared to what it could be.

I suspect we'll start seeing meta-art soon with a much more interesting mix of creation, original thought, and execution.
by Someone | 2026-01-21 15:16:46+00:00
> For historical context, a PC compatible is a machine that can run a DOS that is compatible with PC-DOS and that can run applications for the IBM PC running PC DOS.

Historically, a lot more was required in practice. For example, programs that use the BIOS for screen I/O are slow, so most programs wrote directly to video memory. Because of that, video memory had to be laid out identically and had to be located at the same address.

See https://en.wikipedia.org/wiki/IBM_PC_compatible#Non-compatib... for other examples.
Show HN: I built an AI book recommender in 2 days
by PouyaRZ | 2026-01-21 15:17:04+00:00
Hi HN! I built this in ~2 days over the New Year's break, and it was the most fun I've had coding in a while...

*Why I built it:*
I was tired of generic listicles and recoms from Google Search, ChatGPT/Gemini, and Goodreads. I wanted something where I could say "a cozy mystery for a rainy weekend" or "something like Kafka but less depressing" and get actual niche results.

*How it works:*
- Describe what you're looking for in plain text (or voice) [https://mynextbook.ai/onboarding-books]
- A RAG system, built using Gemini 2.5 Flash Lite + Exa search, finds personalized recommendations
- Metadata is fetched from multiple sources
- ~5-10 seconds from input to recs (5-10X faster with cache)

*Stack:*
- Next.js 14 / TypeScript on Vercel
- Neon (Postgres) + Prisma
- Gemini + Exa Search API
- Built with Cursor + Claude Code, & AntiGravity (happy to discuss which was better for what)

*Try it without signing up:* no sign-up required to explore

*Bonus:* It also recommends movies and TV shows based on your book taste! I've found some binge-worthy stuff through it that I would've never found otherwise.

Still a tiny side project, but I love seeing people actually find useful recoms with it. Would love feedback on rec quality, UX, or features you'd want!
by CrossVR | 2026-01-21 15:17:05+00:00
> If an attacker can't even name a resource they're not allowed to access, that's quite a strong security property.

This is entirely incorrect. An attacker can still name a resource, it only has to guess the right port number that is mapped to that resource.

That's how NAT fundamentally works after all, it allows you to use the additional 16-bits of the port number to extend the IP address space. Any blocking of incoming traffic on a port already mapped to a local address is a firewall rule.

The reason that it offers protection is because attackers aren't going to try every single port. Compared to that IPv6 will offer more protection as an attacker would have to guess the right address in a 64-bit namespace rather than just a 16-bit one.
by huntergemmer | 2026-01-21 15:17:10+00:00
Thanks! The name was honestly just "what does this do" + "how does it do it" haha.

Interesting you mention three.js - there's definitely overlap in the WebGPU graphics space. My focus is specifically on 2D data visualization (time series, financial charts, dashboards), but I could see the rendering patterns being useful elsewhere.

On sustainability - still figuring that out. For now it's a passion project, but I've thought about a "pro" tier for enterprise features (real-time collaboration, premium chart types) while keeping the core MIT forever. Open to ideas if you have thoughts.

Appreciate the kind words! :)
by dagss | 2026-01-21 15:17:45+00:00
I just long for DBs to evolve from "stateful" to "stateless". CQRS at the DB level.

* All inserts into append only tables. ("UserCreatedByEnrollment", "UserDeletedBySupport" instead of INSERT vs UPDATE on a stateful CRUD table)

* Declare views on these tables in the DB that present the data you want to query -- including automatically maintained materialized indices on multiple columns resulting from joins. So your "User" view is an expression involving those event tables (or "UserForApp" and "UserForSupport"), and the DB takes care of maintaining indices on these which are consistent with the insert-only tables.

* Put in archival policies saying to delete / archive events that do not affect the given subset of views. ("Delete everything in UserCreatedByEnrollment that isn't shown through UserForApp or UserForSupport")

I tend to structure my code and DB schemas like this anyway, but lack of smoother DB support means it's currently for people who are especially interested in it.

Some bleeding edge DBs let you do at least some of this efficient and user-friendly. I.e. they will maintain powerful materialized views and you don't have to write triggers etc manually. But I long for the day we get more OLTP focus in this area not just OLAP.
by polyglotfacto | 2026-01-21 15:17:49+00:00
So first of all, as per my other comments on this threads and coming from a browser engineer: the autonomous coding agents failed miserably.

Whether it is the best case scenario in terms of benchmark, I am not so sure.

The Web is indeed standardized and there are many open-source implementations out there. But how to implement the Web in a novel way by definition means you are trying to solve some perceived problem with existing implementations.

So I would rephrase your statement as such: rewriting an existing engine in another language without any novelty might be the best case scenario for autonomous coding agents.

As an example of approaching the problem in a novel way: the Fastrender code seems obsessed with metering of resources. Implementing the Web with that constraint in mind would be an interesting problem and not obvious at all. That's not what the project is doing so far by the way, since the code is quite frankly a bunch of spaghetti that does not follow Web standards at all(in a way that is unrelated to the metering story, so the divergence from specs is not novel, it's just wrong).
by marginalia_nu | 2026-01-21 15:18:06+00:00
> * not too many super-rich / billionaires, who can just buy anything they want anytime, or ruin the careers of people going against them, hence people probably acted more freely.

The provided timespan encompasses the 'gilded age' era, which saw some ridiculous wealth accumulation. Like J.P. Morgan personally bailed out as the US Treasury at one point.

Much of antitrust law was implemented to prevent those sorts of robber baron business practices (explicitly targeting Rockefeller's Standard Oil), fairly successfully too. Until we more or less stopped enforcing them and now we're largely back where we started.
by MrOrelliOReilly | 2026-01-21 15:18:16+00:00
For me, the killer feature would more be _autocomplete_ for art. I love to cartoon and doodle, but don’t have the time/patience/skillset to build professional digital assets. If I could go from my pencil drawn sketch to a flashy png, that would be awesome! I think it’d be a nice use of AI, since it just allows me to do more with my own creativity.

Unfortunately whenever I’ve tried uploading a sketch to ChatGPT or Gemini, it seems to fixate on details of my sketch, and recreates my mistakes in high fidelity. It fails to take a creative leap toward a good result. I’ve heard some professionals have gotten good results building custom workflows in ComfyUI.