MurphyA/hacker-news huggingface dataset:
by BeetleB | 2026-01-23 21:00:13+00:00
> With a car on lane keeping / cruise control you could slow down in front of it all the way to a stop and it will gladly stop behind you.

Blue Cruise, and I assume Tesla's FSD as well, will simply change the lane and go around you.

If the guy had a simple LKAS and adaptive cruise control on, then yes, you're right.
by kypro | 2026-01-23 21:00:15+00:00
Really depends on your engineering process, but this is why you want to enforce good processes.

- Every change beyond the most insignificant package bump should be ticketed, and specifically tickets should document the business why.

- Every PR should include a high-level description of the change, and should document any technical whys.

- Code comments should be used where appropriate to document code-level whys and hows.

- For significant architectural changes ADRs should written up to document why the architectural change was made.

Failure for your team to do this results in the problem you're experiencing now.
by mkw5053 | 2026-01-23 21:00:16+00:00
I guess nothing super surprising or new but still valuable read. I wish it was easier/native to reflect on the loop and/or histories while using agentic coding CLIs. I've found some success with an MCP that let's me query my chat histories, but I have to be very explicit about it's use. Also, like many things, continuous learning would probably solve this.
by bluGill | 2026-01-23 21:00:22+00:00
Parts were mostly never standardized. The difference is when a production run ends they would sell all the tooling to a third party that makes parts under their own name. (and even before production ends parts that break often are worth duplicating). With computers when the production run of the LCD, CPU, ... ends nobody is making more. Even if you could get the software to install, nobody makes the computer at all at any price.
by kaydub | 2026-01-23 21:00:26+00:00
I haven't seen your issue, but git is actually one of the things I don't have the llm do.

When I work on issues I create a new branch off of master, let the llm go to town on it, then I manually commit and push to remote for an MR/PR. If there are any errors on the commit hooks I just feed the errors back into the agent.
by joshstrange | 2026-01-23 21:00:29+00:00
Hmm, maybe I read the original comment wrong then? I did read it as "You can't blame him, that might not even be what he thinks" and my stance is "He posted it on his blog, directly or indirectly, what else am I supposed to think?".

I agree with you on Steve's case, and I have no ill will towards him. Mostly it was just me trying to "stomp" on giving him a pass, but, as you point out, that may not have been what the original commenter meant.
by ASalazarMX | 2026-01-23 21:01:03+00:00
CRITICAL: MAKE NO MISTAKES!
CRITICAL: NEVER APOLOGIZE! MAKE IT RIGHT THE FIRST TIME INSTEAD!
CRITICAL: DO NOT HALLUCINATE OR CONFABULATE EVER!
CRITICAL: DON'T DELETE THE DATABASE WITHOUT ASKING FIRST!
CRITICAL: NEVER USE VERBATIM CODE BLOCKS FROM GPL LICENSED PROJECTS!
...
by kuboble | 2026-01-23 21:01:10+00:00
I'm fully aware of that.

For the last month I've been working on a relatively big feature in a larger project.

I often compact the session when starting a new feature, often have to remind claude to read the claude.md etc. I still use it as if it was a new session regularly, it frequently doesn't remember what it did an hour ago, etc.

But the compact seems to work which is a very different experience than the one of the GP, who kills the session when it reaches the context limit and writes explicit summary files.
by lazide | 2026-01-23 21:01:19+00:00
Considering all the shenanigans Microsoft has been up to with windows 11 and various privacy, advertising, etc. stuff?

Hell, all the times they keep enabling one drive despite it being really clear I don’t want it, and then uploading stuff to the cloud that I don’t want?

I have zero trust for Microsoft now, and not much better for them in the past either.
by davidlu1001 | 2026-01-23 21:01:29+00:00
Thanks for the Pyrefly pointer — I hadn't tracked Meta's Rust rewrite yet. Will dig into their SCC handling.

Your "splitting a module" framing is exactly right. In the IaC world, a Security Group with inline rules is like a Python module with circular imports — it couples identity with logic. The fix is the same: extract the logic into separate resources (or modules), keep the original as a pure identity/interface.

Interesting that the same pattern shows up in both compiler design and infrastructure tooling.
by ClawsOnPaws | 2026-01-23 21:01:36+00:00
Not to mention that this seems to completely ignore all the things that we might use computers for. Browsing websites is only one of the things I do. Many of the things I do I think would be extraordinarily clunky through natural language. Also I just do not feel comfortable talking to my computer out loud, especially when I'm anywhere with other people around. Or I don't know... playing games with friends on voice chat. It seems to be common for people to assume that a fix is very easy and simple. LLM's, OCR for screen readers, etc. If it really was as simple as just slapping OCR on everything, it would already have happened. Also I definitely like some privacy and would prefer my computing not to happen entirely through OpenAI, Anthropic or Google, and whether someone can use computers well or not, we shouldn't force them to do that exact thing. At least in my opinion.
by observationist | 2026-01-23 21:01:38+00:00
People aren't going to forums and social media to hype up their own good code to nearly the same degree as otherwise. It's orders of magnitude more negative. There are ways of using AI well and using it poorly. There's no reason to correct your copmetition's unforced errors, or giving away an advantage in using these tools, for so long as there is a moat of effort and esoteric knowledge.

Just because 99% of the things you read are critical and negatively biased doesn't mean the subsequent determination or the consensus among participants in the public conversation have anything to do with reality.
by qeternity | 2026-01-23 21:01:57+00:00
Definitely. And some random guy on HN knows the value of Brex to Capital One better than Capital One does.

Brex can be worth $5b today and also be worth less in the future. These two realities don’t conflict. Acquisitions can and do end poorly. But the vast majority work well. I am not sure what you don’t understand about that?
by throwup238 | 2026-01-23 21:02:09+00:00
> At the same time, the amount of anti-patterns the LLM generates is higher than I am able to manage. No Claude.md and Skills.md have not fixed the issue.

This is starting to drive me insane. I was working on a Rust cli that depends on docker and Opus decided to just… keep the cli going with a warning “Docker is not installed” before jumping into a pile of garbage code that looks like it was written by a lobotomized kangaroo because it tries to use an Option<Docker> everywhere instead of making sure its installed and quitting with an error if it isn’t.

What do I even write in a CLAUDE.md file? The behavior is so stupid I don’t even know how to prompt against it.
by dalyons | 2026-01-23 21:02:12+00:00
i have a 2020 outback, and I didnt evaluate the lane keeping as part of the purchase decision. But since then i have rented a ton of different cars for work travel, and have realized surbaru has the best system out there, outside of truly premium cars / software cars like tesla. Some of them (chevvy) are outright dangerous. Its surprising because in every other way subaru's electronic / software sucks :)
by waffletower | 2026-01-23 21:02:32+00:00
I TL;DR the update release notes, and wasn't aware that the wheel holding requirements were gone. I am not convinced yet, as I got a phantom "take control of your vehicle" alert when leaving the driveway a few weeks ago, for no apparent reason (hands on wheel, no visible hazards). They happen every once in a while. My daughter has been thinking of using the Tesla alert sound in one of her trap songs given our familiarity with it.
by amlib | 2026-01-23 21:02:49+00:00
If you want maximum commodity and as many things to "just work" as possible out of the box, go for good old plain Ubuntu.

If you care a little more about your privacy and is willing to sacrifice some commodity, go for Fedora. It's community run and fairly robust. You may have issues with media codecs, nvidia drivers and few other wrinkles though. The "workstation" flavor is the most mature, but you may want to give the KDE version a try.

If you want an adventure, try everything else people are recommending here :)
by alephnerd | 2026-01-23 21:02:51+00:00
> Gen Z buying iPods and people buying N64 games again is not evidence of the monoculture breaking apart - it's a retreat into the past for the enlightened few because their needs are not being met by modern goods and services

It's simpler than that - retro is an (a e s t h e t i c)

Those of us who are Zillenials, Gen Z, or Gen Alpha were still in elementary school or not around when those products were mainstream.

It's the same way you saw Millenial hipsters wearing flannel, drinking PBR, started classical rock inspired indie bands like "Clap Your Hands and Say Yeah", renovating abandoned lofts in bRoOklYn, and making 70s and 80s references in Venture Bros.

Most HNers skew old [0] - late 30s to early 40s at the youngest based on most of the references I've seen - so to you guys the iPod or N64 evokes a similar emotion response to similar to what a Nintendo Switch, Bucket Hats, and SnK will in the 2035-45 period.

Nostalgia marketing is the name of the game now [1][2][3].

[0] - https://m.youtube.com/watch?v=5DlTexEXxLQ

[1] - https://www.uschamber.com/co/good-company/launch-pad/busines...

[2] - https://www.hbs.edu/recruiting/insights-and-advice/blog/post...

[3] - https://online.hbs.edu/blog/post/how-to-retain-customers
by dang | 2026-01-23 21:03:01+00:00
Related. Others?

Webneko – a desktop screenmate ported to web - https://news.ycombinator.com/item?id=40843966 - July 2024 (7 comments)

Neko: A history of a software pet - https://news.ycombinator.com/item?id=32037254 - July 2022 (6 comments)
by hinkley | 2026-01-23 21:03:11+00:00
When Covid hit I wasn’t the only one working remotely at my company, but I was the only one working remotely in North America, and apparently the only one trying to Work Smarter. By then there were a handful of feature toggles I had implemented that I quickly set to always on in development, but chief among them was that gzip service calls were a net loss in AWS but very very handy while working from home.

I also had switched a head of line service call that was, for reasons I never sorted out, costing us 30ms TTFB per request for basically fifty bytes of data, to use a long poll in Consul because the data was only meant to be changed at most once every half hour and in practice twice a week. So that latency was hidden in dev sandbox except for startup time, where we had several consul keys being fetched in parallel and applied in order, so one more was hardly noticeable.

The nasty one though was that Artifactory didn’t compress its REST responses, and when you have a CI/CD pipeline that’s been running for six years with half a hundred devs that response is huge because npm is teh dumb. So our poor UI lead kept having npm install timeout and the UI team’s answer for “my environment isn’t working” started with clearing your downloaded deps and starting over.

They finally fixed it after we (and presumably half of the rest of their customers) complained but I was on the back 9 of migrating our entire deployment pipeline to docker and so I had nginx config fairly fresh in my brain and I set them up a forward proxy to do compression termination. It still blew up once a week but that was better than him spending half his day praying to the gods of chaos.
by jmb99 | 2026-01-23 21:03:19+00:00
> I have a 21 yo car and a 12 yo car and will eventually have to get something 'modern' (worse) that forces spyware/subscriptions on me just to get from point at to point b

I daily a 30 year old car. There exists a sweet spot of reliability, safety, and comfort (probably the early-mid 2000s) that in theory, you should never have to buy a vehicle outside of, newer or older. There will always be clean old cars in good shape you can buy, you don't need a new vehicle.

Unless you can't buy gasoline anymore. But that's still quite a long ways away imo.
by joshstrange | 2026-01-23 21:03:30+00:00
Interesting, ok, I might try that on my next attempt. I was trying to have it commit so that I could use pre-commit hooks to enforce things I want (test, lint, prettier, etc) but maybe instead I should handle that myself and make it more explicit in my prompts/CLAUDE.md to test/lint/etc. In reality I should just create a `/prep` command or similar that asks it to do all of that so that once it thinks it's done, I can quickly type that and have it get everything passing/fixed and then give a final report on what it did.
by blibble | 2026-01-23 21:04:28+00:00
as of this week, I've been going through the rigmarole of self-hosting my own email (again), for the same reason as you

any avoidable dependency on the US has become a red line

don't forget to tell fastmail that the reason you're leaving is because they host in the US!

(I also told them if they open a DC outside the reach of the US regime: I be happy to become a customer again)
by joshstrange | 2026-01-23 21:04:51+00:00
I thought I did use Opus 4.5 when I tested this last time but I might have still been on the $20 plan and I cannot remember if you get any Opus 4.5 on that in Claude Code (I thought you did with really low limits?), so maybe I wasn't using Opus 4.5, I will need to try again.
by freedomben | 2026-01-23 21:04:52+00:00
Seriously. Maybe 60% of the time I use claude for tests, the "fix" for the failing tests is also to change the application code so the test passes (in some cases it will want to make massive architecture changes to accomodate the test, even if there's an easy way to adapt the test to better fit the arch). Maybe half the time that's the right thing to do, but the other half the time it is most definitely not. It's a high enough error rate that it borderlines on useful.
by xp84 | 2026-01-23 21:05:25+00:00
It wasn't a sketchy retailer though, it was one Apple has authorized through its handpicked affiliate (in the US, this is probably Blackhawk who basically owns the third-party-giftcard-sales business).

For Apple to say "Don't buy gift cards from our authorized retailers, or prepare to face incredibly harsh consequences due to fraud that you can't detect or predict" while continuing to sell them through those channels is morally bankrupt and completely unacceptable.

I have no doubt fraud is a big problem. It is for all gift cards. But this is a 3 trillion dollar company -- and they make minimum 30% of every gift card sold in pure profit. If they can't secure those channels without torpedoing innocent customers' entire digital lives, they need to drop that channel.
by fzeroracer | 2026-01-23 21:05:31+00:00
Unfortunately there's a loud contingent of incredibly proud idiots that post here as well that really like to pretend they know what they're doing.

The people going 'well of course' or 'this is for the user' drive me insane here because as said, there are secure ways you can build a key escrow system so that your data and systems are actually secure. From a secure design standpoint it feels more and more like we're living in Idiocracy as people argue insecure solutions are secure actually and perfectly acceptable.
by nicoburns | 2026-01-23 21:05:37+00:00
> I'm actually pretty excited about the fact that it's now feasible for me to replace all my BloatedShittyCommercialApps that I only use 5% of with vibe-coded bespoke tools that only do the important 5%, just for me to use.

Aren't you worried that they'll work fine for 3 weeks then delete all your data when you hold them slightly different? Vibe coded software seems to have a similar problem to "Undefined Behaviour", in that just because it works sometimes doesn't mean that it will always work. And there's no limit on what it might do when it doesn't work (the proverbial "nasal demons") - it might well wipe your entire harddrive, not just corrupt it's own data.

You can of course mitigate this by manually reviewing the software, but then you lose at least some of the productivity benefit.
by ben_w | 2026-01-23 21:06:00+00:00
> I was excited and optimistic about transitioning to Swift in the Swift 3 days. By Swift 5 I was pining for Objective-C.

Swift 5 isn't that bad (even if result builders felt like a weird hack to make SwiftUI possible and I dislike SwiftUI massively) but around that point the language has increasingly made me think "why did this happen when Java already existed?"
by franga2000 | 2026-01-23 21:06:00+00:00
The wording is only secondary to my point, which is that this isn't something to prevent. It's not "a security thing". You said "to mitigate the MiTM attack". It's not an attack and nobody should be trying to "mitigate" it. If an app vendor in trying to evade inspection by the user, they're either being shady or incompetent.

And no, most people at least in the reverse engineering circles I'm in/follow, don't say "MiTM attack" when things are done by the user with consent. I've heard MiTM-ing as a verb, MiTM/SSL/TLS proxying/inspection/interception or even (incorrectly) SSL stripping (and surely some more that I don't remember).
by bluGill | 2026-01-23 21:06:06+00:00
You only want to apply expensive fungicide when there is a fungus problem. That means someone needs to go out to the field and check - at least today. You don't want to harvest until the corn is dry, someone needs to check the progress of drying before - today the farmer hand harvest a few cobs of corn from various parts of the field to check. There are lots of other things the farmer is checking that we don't have sensors for - we could but they would be too expensive.
by shade | 2026-01-23 21:06:09+00:00
I have a 2023 Crosstrek, my wife has a '21 Ascent. I have the same habit you do - edging away from large trucks slightly - and both of them do the same thing you described to me.

It's essentially that Subaru's lane system actually has two levels: it has lane keeping where it's just trying to keep you inside the lines, and then on top of that it also has lane centering which is pretty much what it says.

Just a note for you or anyone reading who has a recent Subaru and doesn't know already: if you find the centering really bothersome, you should be able to be able to go into the settings on the instrument cluster display (up/down arrows at the lower left behind the wheel, toggle it until you get to the "hold for settings" option), find the Eyesight settings, and turn off lane centering. It will still try to keep you inside the lane markers but won't try to park you right in the center of the lane. In that mode, it's more like the Honda Sensing system I had on my 2016 Civic.

I go back and forth a bit on it but mostly keep it in lane centering mode now - I've gotten used to how it positions the car in the lane, and it lets me focus more on what's going on around me than micromanaging lane position and such.
by jcalvinowens | 2026-01-23 21:06:14+00:00
You missed the important part:

> For this threat model

We're talking about a hypothetical scenario where a state actor getting the information encrypted by the E2E encryption puts your life or freedom in danger.

If that's you, yes, you absolutely shouldn't trust US corporations, and you should absolutely be auditing the source code. I seriously doubt that's you though, and it's certainly not me.

The sub-title from the original forbes article (linked in the first paragraph of TFA):

> But companies like Apple and Meta set up their systems so such a privacy violation isn’t possible.

...is completely utterly false. The journalist swallowed the marketing whole.
by dethstrobe | 2026-01-23 21:06:29+00:00
So last year the Redwood team, after launching v0 also launched a tutorial to built a non-trivial webapp using their framework. But they're now getting ready for v1 and introduced a few breaking changes so made their tutorial obsolete.

I dogfooded my Playwright reporter on this tutorial, so figured I'd rewrite it for v1 and I wanted to make a tutorial to teach test-driven development too, since I seemed to see a few devs say that testing was a reason they weren't interested in my reporter that generates docs from tests.

Anyway, I completed it earlier this week.

So if you want to learn RedwoodSDK, learn a bit more about Playwright testing, and wanting to learn how you can turn your tests in to living documentation, give it a shot.

Any feedback would be much appreciated.
by bigyabai | 2026-01-23 21:06:34+00:00
> because it was found that terrorists and perverts were using it for terror communications and digital sexual abuse.

Lol, nondescript "terrorists and perverts" are the laughingstock of Western politics. Eyes roll whenever someone justifies drastic action on vague terrorism/perversion accusations: https://youtu.be/ud9zBKJJQe4

My bigger concern is Modi's international reputation for exacerbating crime statistics to manufacture consent for authoritarian policy. We've seen our fair share of that here in America and it's not a positive influence on national politics. So much so that we can't trust our own email providers to be secure.
by dijit | 2026-01-23 21:06:38+00:00
The defenders of Microsoft are right?

How?

There is no point locking your laptop with a passphrase if that passphrase is thrown around.

Sure, maybe some thief can't get access, but they probably can if they can convince Microsoft to hand over the key.

Microsoft should not have the key, thats part of the whole point of FDE; nobody can access your drive except you.

The cost of this is that if you lose your key: you also lose the data.

We have trained users about this for a decade, there have been countless dialogues explaining this, even if we were dumber than we were (we're not, despite what we're being told: users just have fatigue from over stimulation due to shitty UX everywhere); then it's still a bad default.
by Spivak | 2026-01-23 21:06:40+00:00
There is no other way for this to work that won't result in an absolutely massive number of people losing their data permanently who had no idea
their drive was encrypted. Well there is, leave BitLocker disabled by default and the drive unencrypted. Now the police don't even have to ask!

With this scheme the drive is recoverable by the user and unreadable to everyone except you, Microsoft, and the police. Surely that's a massive improvement over sitting in plaintext readable by the world. The people who are prepared to do proper key management will know how to do it themselves.

Apple does the same thing with FileVault when you set up with your iCloud account where, again, previously your disk was just left unencrypted.