MurphyA/hacker-news huggingface dataset:
by phire | 2026-01-21 12:11:13+00:00
Went to double check what my static IP address was, and noticed the router was displaying it as 198.51.100.48/28 (not my real IP).

I don't think the router used to show subnets like that, but it recently got a major firmware update... Or maybe I just never noticed, I've had that static IP allocation for over 5 years. My ISP gave it to me for free after I complained about their CGNAT being broken for like the 3th time.

Guess they decided it was cheaper to just gave me a free static IPv4 address rather than actually looking at the Wireshark logs I had proving their CGNAT was doing weird things again.

Not sure if they gave me a full /28 by mistake, or as some kind of apology. Guess they have plenty of IPs now thanks to CGNAT.
by jbstack | 2026-01-21 12:12:36+00:00
No insult intended. I genuinely wasn't aware of what advantages macOS offers for a power user (by which I mean someone who wants to do tasks more advanced than browsing, email, etc.). From quickly skimming the replies the common theme seems to be a mixture of battery efficiency, hardware compatibility, and Mac-only software.

> Been there done that. I have too many other things that need to get done to build up a distro.

Yes, but my comment wasn't made in isolation or directed at people with your objectives. The OP's article is about doing exactly this, but in the opposite direction (expending large amounts of effort to remove unneeded processes). See for example: "if we assume that we need to identify just 500 candidates, and each takes an average of one week to research, that would take over 10 person-years".

Starting with that as the baseline (as opposed to starting from your position which is that you're not interested in spending time on this issue), building up from zero is a lot more straightforward. And, if you use something like NixOS, you generally only have to do it once since the idea of "reinstalling" the OS (e.g. for new versions) largely goes away: subsequent effort is just about changing your mind about what software you want, or what version you want (as with any OS).
by rob74 | 2026-01-21 12:12:42+00:00
> “Not much. The real incentive for finding a vulnerability in cURL is the fame ('brand is priceless'), not the hundred or few thousand dollars. $10,000 (maximum cURL bounty) is not a lot of money in the grand scheme of things, for somebody capable of finding a critical vulnerability in curl.”

That's the choice as seen from the perspective of a white-hat hacker. But for an exploitable vulnerability, the real choice is to sell it to malware producers (I'm including state-sponsored spyware companies like the makers of Pegasus in this category) for a lot of money, or do the more moral thing and earn at least a little bit of money via a bug bounty program.
by jrjeksjd8d | 2026-01-21 12:12:50+00:00
A key thing I noticed in sincere anecdotes about LLM code is that is always seems to be outside of the author's area of expertise.

I work with an infrastructure team that are old school sysadmins, not really into coding. They are now prodigiously churning out apps that "work" for a given task. It is producing a ton of technical debt and slowing down new feature development, but this team doesn't really get it because they don't know enough software engineering to understand.

Likewise the recent example of an LLM "coding a browser" where the result didn't compile and wasn't useful. If you took it at face value you'd think "wow that's a hard task I couldn't do, and an LLM did it alone". In fact they spent a ton of effort on manually herding the LLM only for it to produce something pretty useless.
by alkonaut | 2026-01-21 12:13:04+00:00
I'm stuck with the Copilot tools. Again, I don't think this is a problem with the models but with the tooling. I can't switch to claude code (for work, that is) and while I don't mind using more command line tools I don't want to run multiple IDE's.

But it's good to hear that it's not me being completely dumb, it's Copilot Agent Mode tooling that is?
by da_chicken | 2026-01-21 12:13:10+00:00
The reason to soft delete is to preserve the deleted data for later use. If you need to not query that data for a significant amount of the system use that 75% soft deletes is a performance problem, then you either need to move the soft deleted data out of the way inside the table (partition) or to another table entirely.

The correct thing to do if your retention policy is causing a performance problem is to sit down and actually decide what the data is truly needed for, and if you can make some transformations/projections to combine only the actual data you really use to a different location so you can discard the rest. That's just data warehousing.

Data warehouse doesn't only mean "cube tables". It also just means "a different location for data we rarely need, stored in a way that is only convenient for the old data needs". It doesn't need to be a different RDBMS or even a different database.
by traceroute66 | 2026-01-21 12:13:12+00:00
> the question if it's possible to create one to support an Open Source project, and which tax benefits donors can get.

As the old saying goes ... what has that got to do with the price of eggs ?

A non-profit is a non-profit, doesn't matter if you are supporting Open Source or the community homeless.

Same goes for donors. A donation is a donation.

Codeberg e.v. (a.k.a. Forgejo) is one example that comes to mind, but I'm sure there are many others.
by DrScientist | 2026-01-21 12:14:02+00:00
I understand, but it's also a bit rich coming from the US.

When the US applies country level sanctions or goes to war in places like Gaza, Afghanistan, Venezuela, Cuba, Iraq, Libya, Yemen, Iran - I don't see much thought given to it really not being the peoples fault.

> The same thing could happen at any time in any country.

Exactly.
by MatthewRMayes | 2026-01-21 12:14:27+00:00
We’ve just launched ADAPT CORE, an early AI training tool exploring whether emotional composure is a trainable skill in sales.
Most sales tools focus on scripts or tactics. We’re interested in whether training emotional control and presence, the human side of selling, makes a measurable difference.
This is early and very much a hypothesis test, although we have our own proprietary browser based DNN (Adapt Vision @ A-dapt.com). We’re looking for thoughtful feedback, especially from people who sell or lead sales teams.
Happy to answer questions about the approach or what we’re seeing so far matthew@a-dapt.com
by at__ | 2026-01-21 12:15:00+00:00
The emergence of this kind of thing has been so surprising to me. The exact same sort of person that managed to bottleneck themselves and obliterate signal-to-noise ratios at every company they work for with endless obsession over the trivial minutiae of the systems they are working with have found a way to do it with LLMs, too, which I would have assumed would have been the death of this kind of busywork
by mirekrusin | 2026-01-21 12:15:20+00:00
Also in my opinion it's more about removing dependency than just job count (which is just nice to have side effect).

US/Trump doesn't want China to have any levers that control US economy, ie. they want situation where any China decisions that can be made to be immaterial to US economy.

If you look at it from this perspective then things like Greenland also do start to make sense as it is indeed long term investment into independency (minerals, rare earth elements). It's not about military presence, they already have it through NATO, it's more about setting up industry around resources – military advantages do exist as well of course but imho that's lower on the list, it just sells better to plebs.
by jcmartinezdev | 2026-01-21 12:16:08+00:00
But that’s the thing, even though it took weeks I spent a non insignificant amount of euros to set it up, I think it was nearly 2k at the end; and to make it quick would probably be another K or so?

It’s crazy expensive, because of all the bureaucracy. The UG is supposed to be quick and easy to set up, requiring minimum capital… but the process proves expensive.
by crote | 2026-01-21 12:16:18+00:00
It's the same on the sender side. Most people of course just outsource it to some SaaS like Sendgrid, and of course have some fancy microservice event bus architecture to get it there. That 'your login email has been sent' actually means 'your email has entered the very first queue, and we're hoping it makes it through all the layers soon'.

There have been plenty of instances where I tried to log in somewhere, and the first attempt to contact my mail server was twenty minutes later. And of course they then deliver all five retries at once.
by keyle | 2026-01-21 12:16:30+00:00
Just watch the first 2 mins of this and try to keep a straight face.

https://www.youtube.com/watch?v=4OmlGpVrVtM

You'll have your answer.

PS: don't try to use his website/apps, half of it is broken... and he has generated a 'jobs' page on the main app's website which made me laugh so hard I got a coughing fit.
by lotsofpulp | 2026-01-21 12:16:33+00:00
California’s taxes and cost of labor combined are surely up there.

Besides a fractured market with lots of different bureaucracies to deal with, the lack of at-will employment is a big labor cost when you need to be able to quickly spin up or spin down operations.

Welfare should always be a responsibility of the government, not businesses. Let businesses business and let government redistribute wealth.
by skrebbel | 2026-01-21 12:16:41+00:00
It wouldn't. I read this as "we gotta try something" but let's be honest, no amount of work on incorporation rules or employee options schemes or whatever they make up next, is going to meaningfully change the culture and attitude of European capital markets.

If the EU really wants to light the fire, they should invest all those suddenly available defense euros in European companies only. Keep that going for a decade and there'll be a whole new generation of angel investors and small funds run by recently exited entrepreneurs with a soft spot for proper innovation. The SV VC culture didn't pop into being magically. It happened because a sufficiently large % of VCs had been entrepreneurs in a previous life (and not bankers), and their attitudes rubbed off on the rest.
by gforce_de | 2026-01-21 12:17:15+00:00
Wow, for screenshots much faster than chromium:

$ time target/release/fetch_and_render "https://www.lauf-goethe-lauf.de/"
real 0m0,685s
user 0m0,548s
sys 0m0,070s

$ time chromium --headless --disable-gpu --screenshot=out.png --window-size=1200,800 https://www.lauf-goethe-lauf.de/
real 0m1,099s
user 0m0,927s
sys 0m0,692s

# edit: with a hot-standby chrome and a running node instance a can reach 0,369s seconds here
by user3939382 | 2026-01-21 12:17:30+00:00
You talked right past the key point which is valid:

> There's more security to be had in an intrinsic architectural feature (like IPv4 NAT being necessary due to limited IPv4 space meaning most IPv4 devices behind CANNOT be addressed from the internet without NAT) then there are in policy features (most firewalls SHOULD have the default deny IPv6 rule that will stop their address being reached from the internet.)

One security property is architectural, one isn’t. They’re not the same.
by embedding-shape | 2026-01-21 12:17:51+00:00
Hm, yeah maybe. I've tried Cursor once, but the entire experience was so horrible, and it was really hard to know what's going on.

The workflow I have right now, is something like what I put before, and I do it with Codex and Claude Code, both work the same. Maybe try out one of those, if you're comfortable with the terminal? It basically opens up a terminal UI, can read current files, you enter a prompt, wait, then can review the results with git or whatever VCS you use.

But I'm also never "vibe-coding", I'm reviewing every single line, and mercilessly ask the agent to refactor whenever the code isn't up to my standards. Also restart the agent after each prompt finished, as they get really dumb as soon as context is used more than 20% of their "max".
by derangedHorse | 2026-01-21 12:18:21+00:00
> Any advice that you both understand and fits perfectly into your mental model is probably coming from whatever dogma you already follow

I don't know what you mean by "fits perfectly" into one's mental model, but one can certainly accept new information validated against their own understanding of the world. People don't put an equal amount of weight in each of their beliefs and there are axiomatic ones that can be used in logical arguments to disprove the inconsistencies of others.
by jcmartinezdev | 2026-01-21 12:18:25+00:00
Maybe I should have taken another road considering the size of my operations, unfortunately I was wrongly advised when starting up, I spent 1k with a Steuerberatung for advice on what was the proper structure for me, and still… I think they just adviced me the option that was gonna cost me the most to operate.

Lesson learned I guess!
by billy99k | 2026-01-21 12:18:51+00:00
I've been active in the bug bounty community for almost 7 years now. The problem is that the majority of companies don't act in good faith.

Even when you have something fully exploitable and valid, they will many times find some way to not pay you or lower the severity to pay you very little.

The catch-all excuse is something along the lines: "although this is vulnerable, it doesn't impact the business".

I've gotten this excuse, even when I could prove it was a production server with customer information that I could access.

Sites like Hackerone can help, but in the end, it comes down to the company running the bug bounty program.
by indigo945 | 2026-01-21 12:19:36+00:00
Right, but I think that the Recycle Bin is exactly what is causing the issue here. Users have been taught for decades that if they delete something, it is not really gone, as they can always just go back to their Recycle Bin or Deleted Items folder and restore it. (I have worked with clients that used the Deleted Items folder in Outlook as an archive for certain conversations, and would regularly reference it.)

So users have been taught that the term "delete" means "move somewhere out of my sight". If you design a UI and make "delete" mean something completely different from what everyone already understands it to mean, the problem is you, not the user.
by torginus | 2026-01-21 12:20:00+00:00
I think there's a philosophical difference between IPv4 and IPv6.

IPv4 is from the era of local computer networks, which feature clients and servers. Clients talk to servers, but servers are not supposed to care or even know about clients unless clients decide to reach out to them. Client-to-Client communication is generally discouraged. The IP address is just a technicality and outside of local networks, just a part of the routing strategy.

IPv6 on the other hand is like an URL - an address you can use to find any device from anywhere on the planet. It makes no distinction between client and server. Which is why its pushed in places like IoT and smartphones - a voip call has no conceptual client and server.

One could make ones smartphones Ipv6 address openly available, and anyone could initiate a voip call to their phones. Would this be wise? I'd argue there's no scenario under which this doesn't cause an unacceptable level of risk, as even if the software is perfect, they'd be still vulnerable to DDOS attacks.

This means that NAT-equivalent firewall rules are necessary, which makes the whole discussion kind of moot, but it's not a good portent for Ipv6 that it makes previously unfeasible kinds of attacks potentially practical.

NAT also allows for other neat tricks, like IP level load balancing.

I'd say one huge and unambiguous advantage of IPv6 is that it makes UDP trivial.
by ViewTrick1002 | 2026-01-21 12:20:37+00:00
Europe is energy poor. We will never be able to compete on raw cost with the US, China and similar.

Our path forward are through renewables, which today are vastly cheaper than fossil fuels.

We decide the speed of the transition to green cheap energy by how much we tax fossil fuels. Low taxes = slow transition. High taxes = fast transition.
by dbuxton | 2026-01-21 12:21:05+00:00
Of all the challenges you face as a startup, the legal entity you choose is possibly the least consequential. Just choose a jurisdiction where investors understand how the legals work (Delaware C-corp, UK Ltd is OK too) and there's a finite administrative burden and/or commoditized tooling in place to help you handle it.

Now, that may not work in all jurisdictions for reasons of local taxation etc (and you'll have to work out payroll tax, benefits etc) but that's almost never anything to do with the legal entity type!
by jleyank | 2026-01-21 12:21:11+00:00
Puerto Rico is not a country, today, but is analogous to Greenland. They could vote to become closer to the US or vote to distance themselves. Similar to all less-than-independent regions held by larger countries. Remnants of the age of exploration or before, or the crumbs left from wars.

Pushing the me-strong logic to the (absurd?) limit, why isn’t California a country? Or New England? Or the red state swath of the US?
Show HN: Link Graph Analysis Tool for Osint Analysts with 70 Transforms
by hienyimba | 2026-01-21 12:21:12+00:00
Hello HN.

We’ve been working on this browser-based tool for months now. It’s a link graph analysis tool like Maltego. It helps you connect the dots between people, companies, businesses and domains. Currently, it has around 70+ transforms (API data calls). We also automatically clean the data, and make it available for download + plugging into your workflow.

Instead of exporting to an AI chat tool, You can also chat with the forensic data we gather from the transforms and find connections using AI right on the platform.

It was built with Laravel (PHP), JS and Cytoscape.

Doing OSINT-related work? Try it out and let me know what you think.
by M2Ys4U | 2026-01-21 12:21:14+00:00
>The ultimate aim is to create a new truly European company structure. We call it EU Inc., with a single and simple set of rules that will apply seamlessly all over our Union.

I hope this is an indication that the Commission proposal will be for a Regulation and not a Directive.

I still don't understand why it's been such a contentious decision to pick between the two.
by nl | 2026-01-21 12:21:53+00:00
To quote you:

> here is no RL for programming languages.

and

> Either RL works & you have evidence

This is just so completely wrong, and here is the evidence.

I think everyone in this thread is just surprised you don't seem to know this.

Haven't you seen the hundreds of job ads for people to write code for LLMs to train on?
by xienze | 2026-01-21 12:21:55+00:00
> There are both happy and unhappy "homogenous" countries. There's literally no correlation.

There’s multiple components to what “happiness” entails. One might argue that a society filled with numerous cultures and ethnicities all vying for their own interests can make for quite a bit of unhappiness. E.g., if everyone was white, there’d be no hand-wringing over white supremacy. If everyone was straight, there’d be no hand-wringing over LGBT representation, and so on. That’s not saying that other social ills can’t exist in homogenous societies, but they do have fewer due to having more shared identity and values. Don’t be dense just to make a point.

> You're reducing all the diverse peoples that made up the nation into a single group based on their skin color.

Like people do today when lumping everyone of various ethnicities into the “white” bucket and decrying “whiteness”? If it’s a valid classification today why can’t we use the same term retrospectively?
by wumms | 2026-01-21 12:21:59+00:00
Agreed.

The far side is the darker side, though, at lunar night. Poetic proof: "The Earth shine might illuminate the light side of the Moon a little during the long night" (from Jules Verne, All Around the Moon https://www.gutenberg.org/cache/epub/16457/pg16457-images.ht...)
by mfld | 2026-01-21 12:22:12+00:00
Agreed. In case you do not have big investors, just register as an individual entrepreneur, get a bank account and get going! It can be turned into a LLC/GmbH later if business goes well.

Also taxes will be much easier. Just get one of the countless apps where you add invoices, and they generate tax reports for you. With an LLC or when employing other people, getting a tax consultant is advised. IMO, they are not expensive - how many hours of your time are you willing to spend on this topic instead of paying e.g. 200 EUR/mo?
by spiderfarmer | 2026-01-21 12:22:19+00:00
It's not going to change overnight, no. But it's an important step.

"Today, if a company wants to scale up, it is confronted with different requirements in each Member State - that leads to an overwhelming 27 different rulebooks."

One of the biggest investors in Europe are pension funds. And this is one of the reasons why they did not invest in EU startups. And they did not expect this move until 2028. So it's moving faster than expected for whatever that is worth.

https://ioplus.nl/en/posts/pension-funds-set-to-drive-europe...

https://ioplus.nl/en/posts/pension-funds-are-open-to-investi...
by solaris2007 | 2026-01-21 12:22:58+00:00
> That is a priggish statement

A cursory glance at the definition of "prig" shows that what I wrote there is categorically not. You should at least try to look up that word and if you look it up and still don't get it then what you have is a reading comprehension issue.

> Typescript is what I choose for most tasks these days.

So you're smart on this, at least. Cantrill said it really well, Typescript brought "fresh water" to Javascript.

> haven’t noticed any real difference between my past C#, C++, C, Java, Ruby, etc programming peers and my current JavaScript ones.

You might still be on their level. I see that you didn't mention Rust or at least GoLang. Given the totality of your responses, you're certainly not writing any safe C (not ever).
by Cthulhu_ | 2026-01-21 12:22:59+00:00
> with the claim that we should move from “validating architecture” to “validating behavior.” In practice, this seems to mean: don’t look at the code; if tests and CI pass, ship it.

The thing that people don't seem to understand is that these are two separate processes with separate goals. You don't do code reviews to validate behaviour, nor do you test to validate code.

Code reviews are for maintainability and non-functional requirements. Maintainability is something that every longer term software project has run into, to the point where applications have been rewritten from scratch because the old code was unmaintainable.

In theory you can say "let the LLM handle it", but how much do you trust it? It's practially equivalent to using a 3rd party library, most people treat them as a black box with an API - the code details don't matter. And it can work, I'm sure, but do you trust it?