MurphyA/hacker-news huggingface dataset:
by deathanatos | 2026-01-16 17:26:05+00:00
This is the company making the tool that is holding the tool, in this case, claiming that "[they] built a browser" when, if TFA's assertions are correct, they did not "build a browser" by any reasonable interpretation of those words.

(I grant that you're speaking from your experience, about different tools, two replies up, but this claims is just paper-rock-scissorable through these various AI tools. "Oh, this tool's authors are just hype, but this tool works totes-mc-oates…". Fool me once, and all.)
by iso1631 | 2026-01-16 17:26:13+00:00
With a 6 day lifetime you'd typically renew after 3 days. If Lets Encrypt is down or refuses to issue then you'd have to choose a different provider. Your browser trusts many different "top of the chain" providers.

With a 30 day cert with renewal 10-15 days in advance that gives you breathing room

Personally I think 3 days is far too short unless you have your automation pulling from two different suppliers.
by Barathkanna | 2026-01-16 17:26:55+00:00
That’s fair, and I probably didn’t explain it clearly. We’re building an AI API as a service platform aimed at early developers and small teams who want to integrate AI without constantly thinking about tokens at all.

I agree that token economics are basically a commodity today. The problem we’re trying to address isn’t beating the market on raw token prices, but removing the mental and financial overhead of having to model usage, estimate burn, and worry about runaway costs while experimenting or shipping early features. In that sense it’s absolutely an engineering and finance problem combined, and we’re intentionally tackling it at the pricing and API layer rather than pretending the underlying models are unique.
by monster_truck | 2026-01-16 17:27:04+00:00
Something I've always believed, and my experience with shipping multinational software on a schedule that has severe drop-dead dates confirmed: If you are contractually obligated to deliver a product that does x, y, and z correctly? QA is the only way to do that seriously. If you don't have QA, you don't care about testing full stop.

This only compounds when you have to comply with safety regulations in every country, completely setting aside the strong moral obligation you should feel to ensure you go far above & beyond mere compliance given the potential for harm. This compounds again when you are reliant upon deliverables from multiple tiers of hardware and software suppliers, each contract with its own drop-dead dates you must enforce. When one of them misfires, and that is a "when, not if", they are going to lie through their teeth and you will need hard proof.

These are not small fines, they are company-killing amounts of money. Nobody profits in this situation. I've been through it twice, both times it was a herculean effort to break even. Hell, even a single near-miss handled poorly is enough to lose out on millions in potential future work. The upsides are quite nice, though. I didn't know it was possible to get more than 100% of your salary as a bonus until then.

Don't take my word for it, though. Ask your insurance agent about the premiums for contractual liability insurance with and without a QA team. If you can provide metrics on their performance, -10-15% is not uncommon, this discount increases over time. Without one? +15-50% depending.
by qwertox | 2026-01-16 17:27:11+00:00
I have now implemented a 2 week renewal interval to test the change to the 45 days, and now they come with a 6-day certificate?

This is no criticism, I like what they do, but how am I supposed to do renewals? If something goes wrong, like the pipeline triggering certbot goes wrong, I won't have time to fix this. So I'd be at a two day renewal with a 4 day "debugging" window.

I'm certain there are some who need this, but it's not me. Also the rationale is a bit odd:

> IP address certificates must be short-lived certificates, a decision we made because IP addresses are more transient than domain names, so validating more frequently is important.

Are IP addresses more transient than a domain within a 45 day window? The static IPs you get when you rent a vps, they're not transient.
by etempleton | 2026-01-16 17:27:19+00:00
I have said, that if Trump has one skill, it is that he can read a crowd. His rally's are word salads and nonsensical because he is searching for the right combination of words that garners the reaction he is looking for and when he gets it he tries to hone in on exactly what the crowd liked about that phrase.

His supporters will often say he is not literal that his words are metaphorical, but he is not a metaphorical person. Everything he says is a serious thought that he is at least considering even if it is absurd to everyone else.
by mindslight | 2026-01-16 17:27:39+00:00
> Why are we all fighting one another?

Because of the Chinese/Russian asset that got into the highest leadership position of the western world, and is now using that position to create fighting amongst ourselves. We had it too good, for too long, people got too entitled, became out of touch with what actually made our society great, and our adversaries took advantage of that.

I'm sorry to all of our allies and friends who didn't even get to vote on the matter.
by array_key_first | 2026-01-16 17:28:20+00:00
What I've learned is that most people are very emotionally immature.

This strategy is one that I would expect to work on children, not adults. But it does actually work, I know because I've done it too.

It shouldn't be the case that criticism and compromises are seen as attacks. Everyone wants to succeed, so just help each other succeed. But it's never that easy.
by observationist | 2026-01-16 17:28:44+00:00
Well, TIL I'm shitty at the private eye thing, lol. You'd need to get up close, then, or have really good cameras. You're not going to need .4mm precision so long as you can see the differential pattern, though. Memorizing a 5 digit number, each digit between 1-6, and you can remember any kwikset key at a glance, and so on. At most you'd need to print 10 possible solutions if you can't find an absolute difference between lowest and highest points, but most of the time the pattern will have 4-6 potential keys it could be.

Anyway, locks and keys are inconveniences that keep people from casually abusing civil boundaries, is the point, and not all reasons for overcoming those are nefarious.
by myrmidon | 2026-01-16 17:29:21+00:00
I wonder if this might even be below reasonable "subsidy-compensation" tariff levels.

BYD, for reference, got almost 30% of their 2024 income from the Chinese state (~$1.4b).

But this is always difficult to judge because most nations help local industry to some degree, and it can be quite difficult to compare.
by palmotea | 2026-01-16 17:29:34+00:00
> I think every company operating Boeing aircraft should have reviewed their stance on Boeing directives in light of MCAS and the aftermath by now. If they did not that is a failure of sorts as well.

Actual question: would an airline have the engineering competence to second-guess an airplane manufacturer's engineering guidance? They operate airplanes but don't build them, and I'd assume they'd out of necessity need to trust the manufacturer's judgement.
by cons0le | 2026-01-16 17:29:42+00:00
At least in my area, WFH is going away and RTO is increasing. More and more of my friends can not meet up for lunch breaks for example.

It seems counterintuitive to restrict where people can be, and expect them to meet new people. I don't want to use my office to socialize, I prefer to make friends that I share interests with.

I see some people in this thread have had success with coworking spaces, that sounds better than an office, at least.
Show HN: Map of California SNO-Parks with current snow depth data
by cloudkj | 2026-01-16 17:29:51+00:00
I was looking for a way to quickly overlay geo data (e.g. current snow depth https://www.fs.usda.gov/sites/nfs/files/r05/publication/R5_S...) on top of a map of points of interest, and couldn't find anything straightforward. This proof-of-concept allows for an example workflow of exporting points of interest from Google Maps (either public or your own creation) as KML files, and plotting this data against arbitrary data in GeoJSON format.

In the motivating example, the main challenge was in converting the raw snow depth data into the proper format, for which I've included some sample adapter code. Sharing this here in case anyone finds it useful for upcoming weekend trips, has recommendations for different tools to solve the same problem, or suggestions for improvement!
by lkey | 2026-01-16 17:30:00+00:00
If you parents are your abusers, then their 'real world' will be unyieldingly bad no matter what social controls the internet employs.

You have said that 'feeling safe' is 'unhealthy' because it's not 'real'. But constantly feeling and being unsafe, even if it is warranted by circumstance, is worse in every way.

We, as a society, do not support the agency to children to escape horrific circumstances. These online communities are a stop-gap against this active failure.

Ideally, they wouldn't need to escape at all, but that's not the conversation we're having.
by rexpop | 2026-01-16 17:30:06+00:00
I would not characterize immigrants as "invaders".

Undocumented immigrants paid $96.7 billion in federal, state, and local taxes in 2022, including $59.4 billion to the federal government and $37.3 billion to state and local governments. Notably, they contributed $25.7 billion in Social Security taxes and $6.4 billion in Medicare taxes—programs they are largely barred from accessing. In California alone, undocumented immigrants paid $8.5 billion in state and local taxes in 2022.

Research using Texas arrest data from 2012-2018 found that undocumented immigrants have substantially lower crime rates than both native-born citizens and legal immigrants. U.S.-born citizens were over 2 times more likely to be arrested for violent crimes, 2.5 times more likely for drug crimes, and over 4 times more likely for property crimes compared to undocumented immigrants. For specific offenses like homicide, assault, and sexual assault, undocumented immigrants were roughly half as likely to be arrested as native-born citizens.
by justonceokay | 2026-01-16 17:30:33+00:00
It’s a complete sea change. I feel Canada only set tariffs on cars out of some deference to the US auto industry. I don’t want to use slippery slope thinking, but this to me smells like rolling out a Canadian auto market that is not dependent on the US.

For the average family, being able to spend significantly less on a car is a big deal.
by _DeadFred_ | 2026-01-16 17:31:15+00:00
Garbanzo/chickpea flour. When I get hungry, I mix 1/2 cup with 1/2 cup water, some olive oil, some garlic powder, some herbs, some marinera, throw it in into the convection oven in a pie tin 8 minutes, then on the rack 5 minutes, and have a warm, protein/gut healthy fiber rich snack.

Plug in seat heater for my mom's old Jeep XJ that I restored.

Long johns for under my jeans. Wool socks (the socks I just get generic off Amazon).
by gus_massa | 2026-01-16 17:31:24+00:00
From the guidelines: https://news.ycombinator.com/newsguidelines.html

Please use the original title:
"SHA-2 and SHA-3 Are Broken Evidence of Cryptographic Signature Forgery with Valid Microsoft Certificates on Modified Binaries OMEGA INFINITY" (you probably have to cut it to make it fit in the 80 char limit.)
by hungryhobbit | 2026-01-16 17:31:27+00:00
Definitely irrational. There are lots of logical reasons to dislike Next (like the fact that they pile new shiny bit on top of new shiny bit without caring about the regular user experience) ... but being mad that it can't run on Vite is silly.

It's like being mad that Rails can't run on Python, or that React can't run on jQuery. Next already has its own build system, so of course it doesn't work with another build system.
by mthoms | 2026-01-16 17:31:36+00:00
Some ADHD folks have something called "justice sensitivity"[0]. Put plainly, we get more bothered than neurotypical folks by actions and events we view as morally wrong.

I can't say for certain that this is caused by my ADHD or not, but I have a "sensitivity" to dark patterns. That is to say, dark patterns bug me more than they probably should.

Hiding the pricing until after signup is a dark pattern. It's a clear case of the company optimizing for their interests over mine and they are therefore unworthy of my trust (or so my brain tells me). After all, what other user-hostile design decisions are they going to make?

What ends up happening is that my brain puts its guard up, and keeps it up. It's constantly on the lookout for more subtle tricks and corner cutting.

Furthermore, I'm offended that they think I'm that stupid (but that's probably the developer in me and not my ADHD).

The landing page piqued my interest but then let me down. Hard. Not because $40 a month (as reported by another user here) is too much, but because I find dark patterns to be morally repugnant.

[0] https://edgefoundation.org/the-fairness-imperative-adhd-and-...

P.S. I struggled to write this as its first thing in the morning and I haven't even had coffee.
by ronsor | 2026-01-16 17:31:38+00:00
> I think it should be and also disallow Linux syscalls and Z: drive accesses by default from within the "sandbox" on top of that in order to reduce the attack surface.

This is not even remotely sufficient. A malicious application could modify the memory pages of WINE code and execute direct syscalls anyway.

If you want sandboxing, use a Linux sandboxing solution on WINE. It's far too late to try to bolt on sandboxing now.
by aghilmort | 2026-01-16 17:31:43+00:00
yeah, one way to frame is have to have structural parity & semantic parity & bridge to & from both like balanced scales.

We started with structure to help others solve semantics. Your approach doing same thing from other direction!

While theoretically possible to do just one or other in nested way it’s much easier to do little bit of both, especially if want anything approaching associative recall & reasoning. Akin to dynamically balancing volume between parts of songs or reprojecting continuously into some frequency envelope etc.
by bawolff | 2026-01-16 17:31:55+00:00
Hosting does not include software development. It does not include sysadmins. I'm not sure if it even includes data center personel (Wikipedia owns its own servers. That means you have to hire people to plug them in. Amazon isnt doing it for you).

Software doesn't write itself, and improving the software for Wikipedia is where the lion-share of the budget is going.

That doesn't even get into less technical roles like legal or community outreach, which are very much spending for wikipedia.

Hosting is a small portion of the budget because its by far the cheapest part of running a major website. In many ways its also the easiest part to make cheap, simply by not using AWS.
by kingstnap | 2026-01-16 17:32:18+00:00
It's for just 50k vehicles, which means that the first 50k that get sent will be all Luxury high margin electric vehicles.

> explicitly targets the low end of the market, with the government anticipating that within five years, “more than 50% of these vehicles will be affordable EVs with an import price of less than $35,000.”

Yeah right. Why would anyone use there quota for cheap stuff?
by RobinL | 2026-01-16 17:32:40+00:00
Author here. Re: 'SQL should be the first option considered', there are certainly advantages to other dataframe APIs like pandas or polars, and arguably any one is better in the moment than SQL. At the moment Polars is ascendent and it's a high quality API.

But the problem is the ecosystem hasn't standardised on any of them, and it's annoying to have to rewrite pipelines from one dataframe API.

I also agree you're gonna hit OOM if your data is massive, but my guess is the vast majority of tabular data people process is <10GB, and that'll generally process fine on a single large machine. Certainly in my experience it's common to see Spark being used on datasets that are no where big enough to need it. DuckDB is gaining traction, but a lot of people still seem unaware how quickly you can process multiple GB of data on a laptop nowadays.

I guess my overall position is it's a good idea to think about using DuckDB first, because often it'll do the job quickly and easily. There are a whole host of scenarios where it's inappropriate, but it's a good place to start.
by irishcoffee | 2026-01-16 17:32:54+00:00
Shitty napkin math says china is saving about $1-$1.5B, so I agree, I'm not seeing the needle more here. What _does_ make sense is that this agreement will continue to evolve over time. What _doesn't_ make sense is the 10-40% battery capacity loss because of temperature, for EVs in canada. I think newer EVs manage temperature issues like this better than older models, but I am unfamiliar with chinese EVs so I can't speak to them.
by gpm | 2026-01-16 17:33:07+00:00
While we (Canadians) certainly aren't happy with Trump's attack on Venezuela, Trump's threats against Canada, reneging on deals with Canada, threats against Greenland, and attacks on the US's domestic rule of law probably all carry more weight in this decision than that.

Despite the issues that Trump has caused Canada still does more trade with the US, on more favourable terms, than China...
by aagha | 2026-01-16 17:33:19+00:00
You forgot another point--or it could be related to #3: off-shoring and H1B. Many people are just working the job and working on a small piece of software where they don't know or care about the ramification of project. They're getting paid and even if they know what's happening, they're not incentivized to care about what happens in America.
by smu3l | 2026-01-16 17:33:19+00:00
A couple of decades ago I was taking a class at UNC on survey sampling methods. Topics included designing sampling schemes that were efficient in the statistical and actual cost sense, developing variance estimators based on your sampling scheme, etc.

For example if you want to observe and measure some attribute of classes at public schools in your county, it might be infeasible to send data collectors to all of 15 schools, but the marginal cost of measuring additional classrooms at the same school once you're there is minimal. So, how many schools should you visit and how many class rooms per school given a budget and assumptions on inter and intra school variation?

We had had a group assignment to estimate the average circumference of trees on campus. Our initial plan something like 1) get a map of campus and split it into zones 2) sample zones randomly 3) everyone goes to a few (small) zones and tries to roughly map out the trees there 4) sample again from those trees and physically measure them. This would mean running around campus for at least a few days if we wanted to an honest job. And it was a rainy spring in North Carolina.

However, one of my group mates had a stroke of brilliance and decided to email the grounds department. To our surprise they were able to provide us with a full list of every known tree on campus as well as GIS data with locations. So we were able to do a legitimate simple random sample which was optimally efficient from in terms of both variance and time-in-rain.

In conclusion I'm pro list-of-individual-trees.
by yabones | 2026-01-16 17:33:29+00:00
There are a massive amount of new EVs in Quebec, which isn't exactly tropical. Part of it is subsidies, $2K for new EV, and $600 for charging. The other thing is the crazy scale of hydroelectric production in that province, some of which gets exported as far as Baltimore. So electricity is very available and reasonably cheap in QC.

We'll see how BYD's handle the bone chilling Montreal winters... Unless they're an absolute flop, I can see some fairly solid future prospects.

(I live in Ontario, but I've been to Le Belle Province quite a bit ;) )

https://www.quebec.ca/en/transports/electric-transportation/...

https://www.quebec.ca/en/transports/electric-transportation/...

https://en.wikipedia.org/wiki/James_Bay_Project
by miladyincontrol | 2026-01-16 17:34:01+00:00
This might be more of a gen Z and zillennial thing but the embedding of black & white purity tests in almost all social settings is a big factor.

You must have opinion and they all must align perfectly like mine. Case and point people's behaviors around the 2024 election.

Russian? You better be the most outspoken anti Putin-ist . Jewish? You better be sorry for the Zionists at every turn. Queer? Oh sorry you work for Google and even if your department has nothing to do with the current bads you're bad too, stop stealing from artists with AI.
Those are some extreme and blatant examples but ones I've witnessed cause people to get excommunicated no matter how bleeding of a heart they have for the causes people rhetorically crucify them over.

I'm not going to pretend you should be fine if say, a literal unironic nazi is trying to cozy up in your book club, or some clown is constantly bringing up "hot takes" needlessly on your baseball club. But these constant purity tests typically remove all nuance and leave both sides heavily alienated, leaving many to fall into a hedgehog's dilemma of fearing interactions lest they're accused of things they simply are not.
by palmotea | 2026-01-16 17:34:06+00:00
> Up until a while ago, I'm pretty sure that the consensus was that China not trustworthy. And then, Trump plays his cards and the consensus is now that the US are even less trustworthy. So here you go.

But that doesn't make China trustworthy, which this move implies.

It seems like there's some "narcissism of small differences" kind of thing going on here. Trump may not share Canada/Europe's values to the same degree of prior US presidents, but China does not share those values at all and never has. It's really questionable judgement to throw your lot in with China if you're not happy with the leadership of the US.
by embedding-shape | 2026-01-16 17:34:07+00:00
Yes, and apparently is a horrible way, because they've obviously failed to produce a functioning browser. But since I'm the author of TFA, I guess I'm kind of biased in this discussion.

Codex was sold to me as a tool that can help me do program. I tried it, evaluated it, found it helpful, continued using it. Based on my experience, it definitively helps with some tasks. Apparently also, it does not work for others, for some not at all. I know the tool works for me, and I take the claim that it doesn't for others, what am I left to believe in? That the tool doesn't actually work, even though my own experience and usage of it says otherwise?

Codex is still an "AI success", regardless if it could build an entire browser by itself, from scratch, or whatever. It helps as it is today, I wouldn't need it to get better to continue using it.

But even with this perspective, which I'd say is "nuanced" (others would claim "AI zealot" probably), I'm trying to see if what Cursor claims is actually true, that they managed to build a browser in that way. When it doesn't seem true, I call it out. I still disagree with "This is what most AI "successes" turn out to be when you apply even a modicum of scrutiny", and I'm claiming what Cursor is doing here is different.
by kfreds | 2026-01-16 17:35:18+00:00
> An account-number model like Mullvad's would seem preferable

Thank you! :)

> .. assuming vendor’s TEE actually works

For sure TEEs have a rich history of vulnerabilities and nuanced limitations in their threat models. As a concept however, it is really powerful, and implementers will likely get things more and more right.

As for GPUs, some of Nvidia’s hardware does support remote attestation.

https://docs.nvidia.com/attestation/index.html