MurphyA/hacker-news huggingface dataset:
by ecshafer | 2026-01-09 17:52:55+00:00
When I used to work on the Vanguard authentication team, we blocked Vietnam from access because of too much fraud (not my choice). But it was funny because we had Vietnam based clients, so there were a couple HNW clients in the logs that you could see who would log in from Vietnam/Russia/Wherever, get blocked, open their vpn, then log in from England. This was a while back, but even then there was a push for things like yubikey, and hardware tokens, so its not surprising the wind is blowing in this direction of just hardware authenticated people. Financial companies are just constantly fighting fraud in a million ways.
by IggleSniggle | 2026-01-09 17:53:01+00:00
I think it's worth remembering that this was a storage procedure that was also already abnormal/odd because of the specifics of the existing shielding. I think it's somewhat understandable for a technician to trust that the chemists know what they're doing in that kind of circumstance. If they had concerns, they may have even voiced them, but as is often the case, if the authority confirms that even though it's strange it's correct, it's not surprising that a technician would follow the directive. Even the authority figure may have verbally confirmed, "you said an organic absorbent??" "Yes, that's right, inorganic absorbent." Maybe even in a meeting that was meant to clarify written procedures.
by s-y | 2026-01-09 17:53:01+00:00
Again, apples and oranges. Private citizens vs government. Musk has no power given to him by someone, the government does, using that power in a way that might be considered abusive/authoritarian might yield (deserved) backlash.

I'm not sure if I'm not getting something. It's a for-profit organization vs a government entity. It's not even remotely similar.
by linkregister | 2026-01-09 17:53:41+00:00
This is likely part of the Vietnamese and Thai governments' rollout of biometric linking for bank accounts, similar to KYC regulations in the United States. The deadline for Vietnamese biometric linking was December 19th, 2025 [1].

The Vietnamese government has reported a rise in account takeovers and other banking thefts [2]. SIM-swapping has been a tactic used. Adding difficulty for fraudsters to trick unsophisticated banking customers is a valid security layer.

1. https://vietnamnet.vn/en/biometric-deadline-nears-millions-o...

2. https://evrimagaci.org/gpt/vietnam-faces-surge-in-sophistica... (expands upon https://vneconomy-vn/techconnect/mobile-banking-phat-trien-manh-tai-viet-nam.htm)
by Breza | 2026-01-09 17:53:48+00:00
In my experience, infosec jobs are a mix of being bored (as you describe), doing meetings and documentation (e.g. Sales has a prospect that wants assurances that you take security seriously before signing a contract), and absolute blood curdling panic when there's an event.

If your infosec folks are always working 95%, they won't have time for the second two categories.
by wang_li | 2026-01-09 17:54:14+00:00
Yes, which is why we have two houses in the legislature and there are limits on the number of seats in the house and electoral college votes. No polity should be able to procreate their way to political dominance over a peer polity nor should they be able to incentivize law breaking for the same purpose.

And more on point to the subject, imports should be tariffed so that there are not wage benefits to importing products from overseas. It's major bullshit for a country to say "you must have all these employment standards, safety, wage, retirement, health, holidays, etc." for any business in their area and then go and buy competing goods from outside their area with completely different labor standards.
by losso | 2026-01-09 17:54:34+00:00
"Low threshold activity" is a good point.

While editing the mouse pointer of a modern-day OS is pretty much inaccessible, the "cursor" CSS feature in the major browsers immediately felt low threshold, accessible and fun again. Changing the "real" mouse pointer via CSS! Only on a website, but cool nonetheless!

That little fun feature alone helped getting this project off the ground. I tried to make my adaption of the pointer editor low threshold, too! :)
by LeafItAlone | 2026-01-09 17:55:07+00:00
One question could be: which set of people know more about each other at the end of dinner.

Dinner time used to be a time of the day where couples and families would have the first chance since breakfast to discuss their day. With all of different available forms of communication today, my partner and I already know what happened during the other’s day and we are doing something like planning the next adventure.
by AstroBen | 2026-01-09 17:55:08+00:00
give codex a try for $20. You get a lot out of the base subscription. Opus will burn through the $20 sub in an hour

The latest models are all really good at writing code. Which is better is just vibes and personal preference at this point IMO

The agent harness of claude code / opencode / codex is what really makes the difference these days
by CGMthrowaway | 2026-01-09 17:55:21+00:00
Sergey Brin: "We don’t circulate this too much in the AI community… but all models tend to do better if you threaten them - with physical violence. People feel weird about it, so we don't talk about it ... Historically, you just say, ‘I’m going to kidnap you if you don’t blah blah blah.’"

https://www.youtube.com/watch?v=Fn9CpEy5i2s
by flowerthoughts | 2026-01-09 17:55:24+00:00
Or:

"people who come off vaccinations still don't get sick, compared to those who continue taking vaccines"

You have a strong bias towards thinking GLP-1 behaves like a statin rather than a personality altering drug (or a vaccine, or nicotine patches.) Please provide a basis for this bias.

We're not treating GLP-1 different because it's a different thing. We're treating it differently, because we don't know if it's an analogous thing without this type of study.
by aspenmartin | 2026-01-09 17:55:32+00:00
I don’t think for this approach it sounds like, this is related to the large concept model: https://arxiv.org/abs/2412.08821, where the latent space is SONAR, which is very much designed for this purpose. You learn SONAR embeddings so that every sentence with the same semantic meaning gets mapped to the same latent representation. So you can have e.g. a French SONAR encoder and a Finnish SONAR encoder, trained separately with large scale corpi of paired sentences with the same meaning (basically the same thing you would use for learning translation models directly, but for SONAR you don’t need to train a single model per pair of languages). The LCM then works in this language-agnostic SONAR space which means it does (in principle) learn concepts from texts or speech in all supported languages
by PunchyHamster | 2026-01-09 17:55:32+00:00
you just need to go "if you want it loaded your way, you do it" and all is solved

And if loading dishwasher is on top of your marital issues you're probably in very happy marriage.

The constant small degree of conflict and strife is key to happiness, people can't be permanently happy, they just find ways to sabotage when they do
by gus_massa | 2026-01-09 17:55:32+00:00
Hi from Argentina! I think we have a very similar system. 110 years ago men got their national ID number at 18 (during conscription) and women didn't have a register until 30 year later (~1940).

(And when women got it, many lied to appear to be younger, like my gran-grandma that drop 4 years.)

So, expect a lot of unreliable data.
by kube-system | 2026-01-09 17:55:44+00:00
> We are moving to a model where the user is considered the adversary on their own hardware.

That has been the model since day one, since you are using spectrum that, because the end users are not licensed, requires it. Radios in 100% of commercially available phones are locked to prevent user tampering.

You don't get root on your debit card either, despite it running a computer.
by lucb1e | 2026-01-09 17:56:13+00:00
> without any garbage running on it

That sounds like a utopia we've passed by on our way here. Maybe it's possible to make such a dedicated hardware device when the digital wallet becomes available for a (mobile) linux distribution or a degoogled android. Let's see when the phone manufacturers think that's a good idea to lobby for

I'm cynical about the whole digital wallet idea because of this. Not that it's not useful, but it's tying your mobile surveillance unit and browser history to an identity on hardware that you are not meant to control
by dathinab | 2026-01-09 17:56:42+00:00
> does stop malware.

unrelated to phones a lot of (more professional) malware has moved to not persist itself in root space (or at all) as to not leaf traces (instead it will just rely on being able to regain root access as needed every time you reboot with all the juicy parts being in memory only (as in how often do you even roboot your phone))

I think (but am not fully sure) this also applies to phone malware.

I.e. no it doesn't work.

Not unless you

- ban usage of all old phone (which don't get security updates)

- ban usage of all cheap phones/phones with non reliable vendors

- have CHERY like protections in all phones and in general somehow magically have no reliable root privilege escalations anymore

Oh and advanced toolkits sometimes skip the root level persistence and directly go into firmware parts of all kinds.

Furthermore proper 2FA is what is supposed to make online banking secure, not make pretend 2FA where both factors are on the same device (your phone).

And even without proper 2FA, it is fully sufficient to e.g. classify rooted phones as higher risk and limit how much money can be transmitted/handled with it (the limit should ignoring ongoing long term automated repeated transactions, like rent).

There really is no reason to ban it.
by Breza | 2026-01-09 17:57:07+00:00
My friends in that sector all seem to have a lot in common with any other job in a massive corporation. Lots of red tape, hard to advance, but you know your paycheck will clear the bank and nobody's demanding that you put in 100-hour weeks. The difference is the product you're working on, which can range from weapons systems to more mundane things... the "Defense industry" ranges from the assembly line making bullets to the janitorial companies specializing in maintaining military facilities.
by _DeadFred_ | 2026-01-09 17:58:17+00:00
Most sane government agencies would make sure he knew and started following the required protocol so that he would be safe/competent the next time before putting him back on the street. Yet he again failed to do his job and follow protocol, and stood in front of a vehicle. Seems like repeat government/leadership/agent failure.

The quote is 'live in a world where trained cops can panic and act on impulse, but untrained civilians must remain calm with a gun in their face.'. Random americans in unusual situations can't be expected to not stress/freak out, that is realistic human nature.

It is on the trained officers, initiating the situation and experienced with it, to keep things under control. That is literally their job. The obligation shouldn't be on a mom that just dropped her kids at school that isn't the 'trained professional' in the scenario.
by seszett | 2026-01-09 17:59:04+00:00
That's what I do too (not iOS + GrapheneOS but the result is the same) as I was tired of fighting to make my bank apps and itsme (digital identity app in Belgium) work on my rooted phone.

Everytime I have to use a stock phone I'm appalled at the ads and I have absolutely no trust in any US or Chinese manufacturer. So I use them only for banking and digital id because that's presumably not what they actually care about.

It's not that expensive, I think many people have an old Android phone lying around, it doesn't have to be up to date.
by pembrook | 2026-01-09 17:59:05+00:00
You're talking past my criticism and haven't addressed the core logic flaw in your argument.

If government is competent enough to build its own software solutions (and these creations would be valuable enough that open sourcing them would create opportunities for startups in the private sector as you've claimed!)...then they are also competent enough to buy the correct software product from a European private company.

If they cannot be trusted to buy the right software for themselves without the process being corrupted, they sure as hell can't be trusted to BUILD that software from the ground up (a much harder task!).
by noo_u | 2026-01-09 17:59:07+00:00
It is, at this point, an easily verifiable fact that software engineering jobs in Europe are en masse poorly paid, and the majority of the EU companies that actually pay well are actually US based. That VC funding in Europe is atrocious is obvious to anyone who has had to go through it, and have fun letting a poor performer go from your 5 person startup.

Your polite wishful responses are frustrating to read to anyone who's had to go through this hell.
by wbsun | 2026-01-09 17:59:08+00:00
Oh running Linux on a MCU without MMU.

I feel there is a gap between MCU and modern CPU, and also between the software running on top of them. The missing piece is a mid-size computer with:
- A processor, single or multi-core, with computing power like 20 years ago, but modern fabrication process. Maybe without MMU for simplicity.
- RAM between 100MB~1GB and DDR2/3 bandwidth.
- An OS designed and implemented for this type of hardware rather than tailored Linux.

I don't think you can use it for working or your daily entertainment, so I guess not a good business to attract interests.
by BoorishBears | 2026-01-09 17:59:18+00:00
There are more knobs to turn when you have an actual library, and you become a lot less fungible than a random collection of TW classes.

HeroUI faces the same problem, and now their React Native library includes an optional (paid) conpiler solution that makes it faster.

MUI has the same problem but besides templates they have their MUI X data components which aren't limited in complexity to what can be ergonomically copy and pasted to a clipboard.
by iamnothere | 2026-01-09 17:59:21+00:00
He is partially right. The Atlanticist faction in both the US and Europe has been working to get the internet under control since 2016. This project started as a backlash to the Trump election and moved into high gear with COVID and Ukraine. This faction has a sincere belief that the prior openness of the internet is a threat to the international order, as it prevents authorities from shaping civilian perceptions and behavior.

The battlefield has become more complex since 2016, as the old international order is pretty much dead now, so you have competing factions of Atlanticists (US rump admin/UK/FR/DE/Brussels) versus nationalists (US/Israel/Eastern Europe) who both want control of the internet, but through different means and for different reasons. You could also tack on BRICS nations who decided that the best path is to wall themselves off from the open internet.
by exceptione | 2026-01-09 17:59:52+00:00
> "EU shadow cabal"

Oh the irony to flee to a bunch of ultra-corrupt authoritarians whose cheap Waffen-SS imitation just shot an American female citizen three times in the face and whose administration is threatening again and again to declare war with Europe over Greenland.

By including all those right wing tropes it almost seems he is overdoing his subtext "please don't take my words seriously, I don't mean it".

Look, you can be furious over things you do not agree with. You can even choose to cut your wins and leave the country. If you have principles, you have every right to defend them. But this is the old mantra of fascism: might makes right. You won't hear the American monopolists fuming over Chinese conditions.

Regardless of what party in this legal dispute has the strongest case, one should not mistake this signal for what it is. Many powerful American enterprises think they should buy into a might-makes-right government, because they are in essence adversarial to a real democracy. They can't give up their mode of kill the market, they can't give up trampling on user's rights, they can't give up control over the res public to citizens.
by bediger4000 | 2026-01-09 17:59:56+00:00
Surprisingly decent blog post, at least superficially.

But for anything of any complexity, I need to specify a lot of detail to get good code, and sometimes, even then, I don't get usable, correct F#.

The author almost completely fails to follow up on the implications of this, which are of course something like: LLMs will never be creative. Only when they've ingested a huge amount of human-generated code/text/proofs/etc will they be able to surprise anyone with output that seems creative to all of the user population.
by ladidahh | 2026-01-09 18:00:13+00:00
It be nice if you mapped the keys to the user keyboard kinda like ableton, for people who dont have a midi controller handy

White Keys: The keys from ‘A’ to ‘L’ on your keyboard correspond to the white keys on a piano, covering a full octave from C to D.
Black Keys: The keys in between, like ‘W’ and ‘E’, correspond to the black keys or the sharp notes on a piano.
from : https://www.electrikjam.com/use-your-keyboard-as-a-midi-cont...
by echelon | 2026-01-09 18:00:15+00:00
> specced

Totally orthogonal, but you just reminded me of a pet peeve I have.

This word is correct, but I can't stand it.

I wish we spelled this "specked", even though that has a homonym.

Like trafficked, panicked, frolicking, etc.

"specced" makes my brain wince.
by Aromasin | 2026-01-09 18:00:18+00:00
Like all skills; practice. Push through the fear enough times that you learn to love it.

When I was in the military, we once had an exercise which consisted of our troop leaders dropping 60 of us in Edinburgh (Scotland) with nothing on our person except for a cheap film camera. We had to complete a list of challenges with different scores, that varied from "eat a free meal" to "play a hole at St Andrews golf course". We were picked up the following day (meaning we had to find a place to sleep the night) and had to debrief the group on what challenges we managed to complete with video evidence. To be honest, it completely changed my world view in a weekend.

We had guys who talked their way into an airfield, miles away from where we started, and convinced a random pilot to give them a spin in his private aircraft. One group managed to get the castle guards to let them fire the daily One O'Clock Gun from the top of Edinburgh castle. Another did manage to play the first hole of St Andrews (£340 a round, and a 2 hour drive away!). We had people crash a wedding, sew up a kilt, learn to play the bagpipes; it was carnage in the best kind of way.

All of that was done just by asking. At the start of the day, everyone was awkward and embarrased. By the end of day two, we all just wanted to see how much further we could take it. Turns out that sometimes all your inhibitions do is get in the way of a fun time and a great story.
by bflesch | 2026-01-09 18:00:26+00:00
Do you think the Italian bureaucrats really want to ban something in France or Germany?

The Cloudflare CEO is clearly misinterpreting something that was lost in translation, which is the bureaucrats stating "Cloudflare must prevent access to XY from everywhere". For bureaucrats "everywhere" means "in my jurisdiction". I cannot believe that the Cloudflare CEO is trying to nitpick around a single word that he so clearly misinterprets.
by MMAFRAZ | 2026-01-09 18:00:34+00:00
Most teams still launch copy, landing pages, and campaigns based on instinct — then burn weeks and budget finding out what didn’t work.
Vect AI changes that by using real market signals to tell you before you ship whether something will convert.
Main platform
https://vect.pro
Vect AI Bible (how it works, models, and systems)
https://blog.vect.pro
If you want to see how much of Vect AI is already indexed and discoverable, this is the live footprint:
https://www.google.com/search?q=site%3Avect.pro
People using Vect AI don’t guess what to write, build, or launch.
They simulate resonance, detect conversion killers, and validate demand before spending money.
It’s being used by founders, growth teams, and solo builders who care about ROI, not vibes.
Happy to answer how the signal engine works, how the simulations are built, or what’s coming next.
by ChrisArchitect | 2026-01-09 18:00:40+00:00
Buried in here the mention of Textile.

IYKYK. Joyent. TextDrive. Textpattern CMS.

Imagining an alternate universe where it might have been Textile. https://textile-lang.com/

Really it comes down to historically the time and place when Markdown was needed and the power of momentum leading to its mass adoption.
by basilikum | 2026-01-09 18:01:11+00:00
There are two plausible explanations for this:

1. Incompetence. The same reason why many banks al around the world do this without regulations. Some snake oil salesman sold them a security theater SDK or library that blocks user installed or modified OSes.

2. Government control and surveillance. Vietnam is authoritarian. It only makes sense for them to participate in the global war against general purpose computing to gain complete control over their citizens' devices allowing them to restrict software, displayed content and communication to require government approval and enable total surveillance of all activity without any way to bypass this. Instead of outlawing user controlled general purpose computing directly they do it through the backdoor of pretending that it is for people's own safety.
by kccqzy | 2026-01-09 18:01:28+00:00
Oh yeah I remember adding my Yubikey to Vanguard as early as 2019! It felt amazingly modern compared to any other bank. I assume this is your or your team’s work. Thank you!

I’ve also had other banks do the same. They provided me with a debit card that supports international transactions but they did not allow logging in from most Asian countries. So I would log in from Asia, be blocked, turn on my VPN and log in from the U.S. to check the balance on my card.
by zamalek | 2026-01-09 18:01:29+00:00
Games that have problems with the previous approach might have hitches or stalls, though it could manifest in many ways.

Edit: I am running a kernel with it on, as well as Proton-CachyOS which has it opt-in. I have yet to see it make an improvement of any kind. Maybe it might help on lower-spec hardware such as the Deck.
by jjulius | 2026-01-09 18:01:38+00:00
> By 2026, you'll need two phones...

Need? Unless and/or until the ability to log in and do your banking, healthcare, etc. via desktop/laptop goes away, then you don't need a phone to do any of that. Yes, 2FA may be required but in the tangential experience of myself, my partner and my two closest friends, we have multiple 2FA options available to us for our banking/healthcare apps that don't require a smartphone.

I see this point all the time - "You can't bank or do important life stuff without a phone!!!" and it's just, largely, bullshit. I don't do any "important life stuff" on my phone.

Beyond that, even if you had to have a phone to perform those tasks, I'd strongly argue that if you feel you need a second phone, then, and I know this will come off as reductive and unproductive, I think the idea of spending less time on your phone and on the internet, and more time "touching more grass" and interacting with the community and world immediately around you, might apply.
by bell-cot | 2026-01-09 18:01:41+00:00
> My line of thinking is that if someone is technical enough to root his phone he understands the risks.

Kinda like the Wall Street concepts of "Accredited" and "Sophisticated" investors - who could never possibly fall for a Ponzi scammer like https://en.wikipedia.org/wiki/Bernie_Madoff ?

Not to say I'm a fan of Vietnam, or familiar with their ban - but when people are having their money stolen at scale, there's a very strong tendency to blame the gov't and/or financial system. And it's extremely rare for stolen-at-scale funds to not be "reinvested" in further criminal activities - which again, the gov't is expected to deal with.