MurphyA/hacker-news huggingface dataset:
by tsimionescu | 2026-01-21 15:39:28+00:00
You're using somewhat sloppy terminology that will confuse things. An IP packet can't be addressed both to 12.13.14.15 AND to 192.168.0.7.

The realistic attack here is that your ISP sends a packet with destination address 192.168.0.7 to the MAC of your router (the MAC that corresponds to 12.13.14.15). This is a realistic attack scenario if the device that your router connects directly to gets compromised (either by an attacker or by the ISP itself).

Getting a public route that would take packets destined for 192.168.0.7 to reach your router over the Internet is far more unlikely.
by vidarh | 2026-01-21 15:39:33+00:00
I'm currently testing Claude Code for a project where it isn't coding. But the workflows built with it are now making me money after ~2 weeks, and I've previously done the same work manually, so I know the turnaround time: The turnaround for each deliverable is ~2 days with Claude and the fastest I've ever done it manually was 21 days. (Yes, I'm being intentionally vague - there isn't much of a moat for that project given how close Claude gets with very little prompting)

There are absolutely maintainability challenges. You can't just tell these tools to build X and expect to get away with not reviewing the output and/or telling it to revise it.

But if you loosen the reigns and review finished output rather than sit there and metaphorically look over its shoulder for every edit, the time it takes me to get it to revise its work until the quality is what I'd expect of myself is still a tiny fraction of what it'd take me to do things manually.

The time estimate above includes my manual time spent on reviews and fixes. I expect that time savings to increase, as about half of the time I spend on this project now is time spent improving guardrails and adding agents etc. to refine the work automatically before I even glance at the output.

The biggest lesson for me is that when people are not getting good results, most of the time it seems to me it is when people keep watching every step their agent takes, instead of putting in place a decent agent loop (create a plan for X; for each item on the plan: run tests until it works, review your code and fix any identified issues, repeat until the tests and review pass without any issues) and letting the agent work until it stops before you waste time reviewing the result.

Only when the agent repeatedly fails to do an assigned task adequately do I "slow it down" and have it do things step by step to figure out where it gets stuck / goes wrong. At which point I tell it to revise the agents accordingly, and then have it try again.

It's not cost effective to have expensive humans babysit cheap LLMs, yet a lot of people seem to want to babysit the LLMs.
by lostmsu | 2026-01-21 15:39:36+00:00
Just to remind people here: a single uncompressed "4k" picture is 33MB. Have your compositor hold 10 of them and you get 330MB just for the window images.

Across multiple monitors my desktop is 6400x2160, which at 32 bits comes to 55MB.

Considering memory is slow and GPU compute these days is cheap maybe it would make sense to relayout and rerender things each frame directly into screen buffer instead of keeping the window surface buffers resident. That would require rewriting quite a lot of things though.
by Imustaskforhelp | 2026-01-21 15:40:00+00:00
> I don't know any specific "how long they keep logs" or anything like that, but what I do know, is that typically you try to sit on your data for as long as you can, because you always end up finding new uses for it in the future. Maybe you wanna compare how users used the platform in 2022 vs 2033, and then you'd be glad, so unless the company has some explicit public policy about it, assume they sit on it "forever".

I am gonna assume in this case that the answer is forever.

I actually looked at kagi assistant for the purposes of this as someone mentioned and created a free kagi account but looks like that they are using AI models api themselves and the logs which come with that. Wouldn't consider it the most private (although like bedrock and aws says that they provide logs for 30 days but still :/ I feel like there is still a genuine issue )

I don't want to buy a gpu for my use case too though being honest :/

Either I am personally liking the proton lumo models or confer.to (I can't use confer.to on my mac for some reason so proton lumo it is)

I am probably gonna be right on proton lumo + kagi assistant/z.ai (with GLM 4.7 which is crazy good model)

I am really gpu poor (just got a simple mac air m1) but I ran some liquidFM model iirc and it was good for some extremely basic tasks but it fumbled at when I asked it the capital of bhutan just out of curiosity
by Finbel | 2026-01-21 15:40:24+00:00
One fun thing would be to raise the abstraction level of the game.

How would it feel to only interact with your base/economy/army via prompting and face someone doing the same.

Would words per minute replace APM, what would the meta look like etc. Would you be able to adjust the system prompt for your "army" to suit your play style?
by ZitchDog | 2026-01-21 15:40:32+00:00
I had the same question recently! So I did an experiment to see if I could create something of value using agentic coding.

I made the worlds fastest and most accurate JSON Schema parser.

https://github.com/sberan/tjs

But, nobody seems to care. The repo only has 18 stars and my Show HN post got no upvotes. I'm not sure what to take away from that.
by usefulcat | 2026-01-21 15:40:45+00:00
After reading the reddit comments, it looks like a primary problem is that the author doesn't (didn't?) understand how to benchmark it correctly. Like comparing the time to mmap() a file with the time to actually read the same file. Not at all the same thing.

For example:
https://old.reddit.com/r/selfhosted/comments/1qi64pr/i_got_i...
by ebiester | 2026-01-21 15:40:47+00:00
Oh, you bet they would. Nothing causes old white people to riot like mild inconvenience.

That's only mildly sarcastic. For many people, it's become a part of being American, especially on the conservative side of the isle. Now, I personally live in celsius and work comfortably in kilometers, liters, and grams. However, it has become a weird point of pride for some Americans.
by Retr0id | 2026-01-21 15:41:01+00:00
I'm not sure how effective this will be. A lot of AI-generated bug bounty reports are pure spam, but a significant fraction are well-meaning humans who genuinely believe the nonsense an LLM has given them. The former category do not read the rules in the first place and will not be deterred - spray and pray is their MO. The second category will not believe that the "no slop" rules apply to them, because they genuinely think their bug is real.
by dagss | 2026-01-21 15:41:19+00:00
Yes it is.

My point is that event sourcing would have been a lot less painful if popular DBs had builtin support for it in the way I describe.

If you go with event sourcing today you end up with having to do a lot of things that the DB could have been able to handle automatically, but there's an abstraction mismatch.

(I've worked with 3-4 different strategies for doing event sourcing in SQL DBs in my career)
by sublimefire | 2026-01-21 15:41:32+00:00
Did a bit of soul searching and manually optimised to 1087 but I give up. What is the number we are chasing here? IMO I would not join a company giving such a vague problem because you can feel really bad afterwards, especially if this does not open a door to the next stage of the interview. As an alternative we could all instead focus on a real kernel and improve it :)
by anastasija2504 | 2026-01-21 15:41:37+00:00
Software teams don’t implode because of bad code - they implode because someone really needed to win the argument about it.
Picture a team arguing over whether to keep a global Redux store or roll out a context-only solution for a new React component. Minutes later, someone pushes a change that breaks the whole test suite.

A week later, another debate erupts about whether the REST API should be versioned or use a graph-based approach. And there’s always that one Git rebase that turns a quiet sprint into a full-blown firefight.

The line between brilliant innovation and productivity meltdown is thinner than you think – and ego is often the culprit lurking behind every heated Slack thread and passive-aggressive code comment.
by rovr138 | 2026-01-21 15:41:59+00:00
On the Ghostty recommendation, read this first - https://mitchellh.com/writing/ghostty-memory-leak-fix

> A few months ago, users started reporting that Ghostty was consuming absurd amounts of memory, with one user reporting 37 GB after 10 days of uptime.

> ...

> The leak was present since at least Ghostty 1.0, but it is only recently that popular CLI applications (particularly Claude Code) started producing the correct conditions to trigger it at scale. The limited conditions that triggered the leak are what made it particularly tricky to diagnose.

> The fix is merged and is available in tip/nightly releases, and will be part of the tagged 1.3 release in March.
by Imustaskforhelp | 2026-01-21 15:41:59+00:00
Hmm I have always been in the wayland world (KDE,Hyprland etc.) but I have been on xfce in mxlinux and I didn't need to do primary selection & middle click

I don't know if tinycore supports this. This was my biggest grievance because I had to create tmp files paste into it and then cat into it or something to work with this pain (which I feel like is pretty fixable/ maybe a skill issue from my side and honestly wishing for me to learn how to fix it)
by psychoslave | 2026-01-21 15:42:04+00:00
This can happen without putting the most part of intensive payload in a form of external dependencies that can be cut at any point by many factors, while losing all the skills and knowledge on how to effectively plant and harvest. Qualified farmers don’t appear magically over night, let alone people with the passion required to invest their own life into it.

And exporting the model that ravaged one own land, selling the poison that was forbidden in the countries exporting it, what kind of behavior is that? Letting some land having a bit of rest while the same depletion process is applied elsewhere, how fair is that?
by dpark | 2026-01-21 15:42:05+00:00
> Users have been taught for decades that if they delete something, it is not really gone

There are stories all over the internet involving people who leave stuff in their recycle bin or deleted items and then are shocked when it eventually gets purged due to settings or disk space limits or antivirus activity or whatever.

Storing things you care about in the trash is stupid behavior and I hope most of these people learned their lessons after the one time. But recycle bin behavior is beneficial to a much larger set of people, because accidental deletion is common, especially for bulk actions. “Select all these blurry photos, Delete, Confirm, Oh, no! I accidentally deleted the last picture of my Grandma!”

Recycle bin behavior can also make deletion smoother because it allows a platform to skip the Confirm step since it’s reversible.
by chownie | 2026-01-21 15:42:08+00:00
Around last year I was using some custom plugins for OBS, I haven't used Broadcast Box but I can pick it up to try sometime later.

> If that is still too heavy, what could I do to make it better?

I haven't picked it up yet to see whether it's complex enough to really need it but it has the same pain point a few priors did--being yet another service which I must configure via the browser and so it has to run an entire frontend for doing that rather than being able to do config files.
by qcnguy | 2026-01-21 15:42:23+00:00
It's better in all those metrics.

Go on X. Claims are being fact checked and annotated in real time by an algorithm that finds cases where ideologically opposed people still agree on the fact check. People can summon a cutting edge LLM to evaluate claims on demand. There is almost no gatekeeping so discussions show every point of view, which is fair and curious.

Compare to, I dunno, the BBC. The video you see might not even be real. If you're watching a conservative politician maybe 50 minutes were spliced out of the middle of a sentence and the splice was hidden. You hear only what they want you to hear and they gatekeep aggressively. Facts are not checked in real time by a distributed vote, LLMs are not on hand to double check their claims.

AI and social media are working well together. The biggest problem is synthetic video. But TV news has that problem too, it turns out. Just because you hear someone say some words doesn't mean that was what they actually said. So they're doing equally badly in that regard.
by NicoJuicy | 2026-01-21 15:42:28+00:00
Just try out AntiGravity ( Google) or Claude ( 17$)/month.

Ollama with qwen3 and starcoder2 are ok.

I'd recomment to experiment with the following models atm. (eg. with "open-webui"):
- gpt-oss:20b ( fast)
- nemotron-3-nano:30b ( good general purpose)

It doesn't compare to the large LLM's atm. though.
by ks2048 | 2026-01-21 15:42:31+00:00
I never understood the "flag" option on HN. Usually "flag" means to flag as inappropriate - porn, obvious spam, etc.

But, is it meant to be used as "downvote"? i.e. "I don't want to see this topic" or "I disagree with this opinion?". I guess the equivalent here is just lack of an upvote?

There seems to be a variety feedback that mean different things... e.g. sometimes I would like to say "I strongly disagree with this opinion", but I don't want to say "This shouldn't be on HN".
by mothballed | 2026-01-21 15:42:37+00:00
In some parts of the world it's well known if you actually want the police to show up, just claim there are lots of drugs or cash at the location. That will actually get the police excited since they stand to gain from it. It's not clear why the police would care someone is being raped/murdered since they cannot profit from that. Although at 15 I would not expect someone to be wise enough to the world to figure that out.
by embedding-shape | 2026-01-21 15:43:23+00:00
> where that labour is actually being conducted are the ones that are followed.

So in that particular case, would be in both Estonia and Spain, just so we're on the same side?

> But for company tax law, that company is a tax resident in Estonia, not Spain.

Indeed, and I don't think the Estonian company would pay Spanish taxes, correct? Unless they have a presence (subsidiary for example) in Spain, then they would have to pay Spanish taxes. But if not, it's only the employee who pay Spanish tax. Or did I understand incorrectly?

> why not do the same for entrepreneurs?

I think this is exactly what we're doing right now :) Small steps, but EU-INC seems to be one of those steps in that direction.
by dghlsakjg | 2026-01-21 15:43:23+00:00
A toddler lost an eye, several hospitalizations of unrelated bystanders, multiple aircraft damaged in midair collisions, and an attempted assassination of a world leader are some of the highlights. Not exactly a squeaky clean record with no “serious injuries”, even if you ignore the intentional assassination attempt. https://en.wikipedia.org/wiki/List_of_unmanned_aerial_vehicl...

I think FPV and drones are awesome, and have built several myself. It is pretty hard to argue that they are not also very dangerous in the wrong hands. Are there more dangerous things in the world? Sure, but that doesn’t mean people should ignore an easy attack vector. Given the temperature of things currently, I would be incredibly nervous to hear a drone at a protest or political event.
by FireBeyond | 2026-01-21 15:43:26+00:00
I did. But the Studio is also a 5K offering which has also been less specced. Perhaps more comparable but still "less for the same price". So, valid. But yes, I love the XDR, but I wouldn't hold it as a "maybe wait for the XDR 2" (and Studio Display 2) as an alternative to this.
by levolvel | 2026-01-21 15:43:42+00:00
Oh wow! Yea you did pull off a tight budget. I never expected to rely on strangers for hitches or trail angels for couch surfing, but those are some of my best memories. Its an incredible journey.

You absolutely have to go for the PCT! They don't call it the "Goldilocks Trail" for nothing. It has it all! I live on the east coast, like you, so the AT was like hiking in my own backyard, but the PCT. Absolutely stunning! I can't recommend it enough. I hope to hike the CDT either in sections or as a thru-hike once I hit retirement age (but I have a good amount of time before that day arrives lol my memories will have to carry me until then).
by r_lee | 2026-01-21 15:43:50+00:00
You don't sell it to the "Russian mob", you sell it to a highly reputable security company that will buy it for like $10 million or more and sell it to governments and stuff, not the mob.

I mean, seriously.

Why would I ever go find a 0 click rce bug and then just donate it to a trillion dollar company just to get a "thx" when I can just retire right then and there?
by piva00 | 2026-01-21 15:43:54+00:00
Russia was offered to join NATO a long time ago, during Yeltsin years there was a whole lot happening to help the approach of Russia to NATO.

Don't know how old you are but if you are 40+ you should remember the NATO-Russia Founding Act, in 2000 Putin said he didn't see NATO as an enemy.

So this is bullshit, it's a narrative post-hoc'd into existence to justify the imperialist ambitions of Russia under Putin.
by zamadatix | 2026-01-21 15:44:51+00:00
You've repeatedly re-emphasized your personal claim "this is how it was" while continually refusing to provide any external evidence yet have the gumption to continue repeating it must be others letting their personal feelings get in the way of looking at what NAT was.

NAT does not care about anyone's personal feelings, one way or the other. Bringing up what you think other's personal feelings are does not help you redefine the original purpose and usage of NAT to be about security. If you were only arguing pure NAT could possibly be used as a way to have better-than-nothing security then I'd agree, but you're trying to rewrite history to make it sound like that's the way it was always intended or deployed based on your personal understanding of history. If, e.g., the RFC had given more to say about security, I highly doubt you would have complete ignored it these dozens of messages.
by fc417fc802 | 2026-01-21 15:44:51+00:00
Same thought. I doubt they provided additional explanation to candidates - it seems that basic code literacy within the relevant domain is one of the first things being tested.

On the whole I don't think I'd perform all that well on this task given a short time limit but it seems to me to be an extremely well designed task given the stated context. The reference kernel easily fits on a single screen and even the intrinsic version almost does. I think this task would do a good job filtering the people they don't want working for them (and it seems quite likely that I'm borderline or maybe worse by their metric).
by fabian4 | 2026-01-21 15:44:55+00:00
Author here.

This is a write-up of the core design constraint behind Pavis: the runtime is intentionally non-interpreting.

All semantic work (defaults, validation, binding, compilation) happens before deployment. The runtime only executes a fully materialized artifact.

The goal is to make reload, rollback, and recovery mechanically boring by removing runtime inference and learned state from the data plane.

Happy to answer questions or clarify design trade-offs.
by throwway120385 | 2026-01-21 15:45:07+00:00
I think you're both right. Capitalism is an important part of a liberal society. But when we let private institutions become all-powerful then they can erode our freedom too. The problem isn't government or enterprise, it's the idea that only one of these things should be paramount. We need government to do unprofitable but necessary things and we need enterprise to pursue risky things. And we need government to regulate enterprise and enterprise to hold government accountable.

You can name a lot of symptoms of the problem but at its heart there's a lack of accountability in any of our power structures whether they be corporate or government.
by pixl97 | 2026-01-21 15:45:18+00:00
I mean, because the world is connected via a large global network with instant communication.

It's kind of like asking "Why did the world kind of destabilize politically during the 1910s". Massive technological change swept the world and fast travel changed the dynamics of the world.

Our world has changed from one of bulky analog data (paperwork, pictures, remote places) to one where any information can be digitized and sent anywhere in the past 2 decades. This data can be stored pretty much forever. This is as much of a change as what occurred in WWI and WWII. The political dynamics of the world are completely different in the data regime. He who controls the data controls the world.

This is a very difficult trend to counter, just because you decide not to control said data, doesn't mean that others aren't capturing that same data and using it against you, in which they'll take power.

There is a distinct possibility that rights and ever growing capabilities of technology are fundamentally incompatible. This is going to present a growing problem for human societies.
by tsunamifury | 2026-01-21 15:45:25+00:00
This can be said of literally anyone living in the first
World.

I find it deeply laughable anyone would stand on a soap box who lives in a modern first world environment and lecture like this while not seeing the irony that they do it themselves at their level as well.

Please. Stop. Look around. And maybe visit a place where you see how the other half of the planet lives. Likely your world is wildly ostentatious and unnecessary comparatively.

The plank in your eye before your neighbor and all that.
by spopejoy | 2026-01-21 15:45:56+00:00
The OP question was about agentic utility specifically. I've also gotten great side-project utility from AI codegen without having to marry my project to CC or give up on looking at code by simply prompting when I need something from whatever LLM.

Nothing wrong with CC, but I keep hearing the same kind of app being built -- home automation, side-project CRUD.

What I'm deeply skeptical of is the ability for agentic to integrate with a team maintaining+shipping a critical offering. If you're using LLMs for one-off PRs, great but then agentic seems like a band aid for memory etc.

Meamwhile if you're full CC/agentic it seems like a team would get out of sync.
by JumpCrisscross | 2026-01-21 15:45:59+00:00
> it's Putin, not Russia

It’s Putin and Moscow, that population has gone all in on this nonsense.

> What Putin enjoys doing is threatening to use tactical nukes in the hope that no-one calls his bluff

Fair enough. But the threat has been real and explicit. Which gives cover for someone else who actually wants to use them.
by naoldenko | 2026-01-21 15:46:06+00:00
Congrats on the project! I think a project coined as a "Vercel for AI Agents" is well-needed, especially in 2026 with many companies integrating Agents in their workflows. By ensuring developers can create AI Agents easily through a popular programming language and stashing the code on a GitHub Repo to deploying it to a production URL seamlessly seems like an appealing value proposition. Wishing you all the best with the project!
by wolvoleo | 2026-01-21 15:46:23+00:00
We can defend ourselves, it's just that the US didn't want a too-powerful Europe until trump. In particular nuclear. They heavily pushed against that.

We'll have to scale this up now but it is not a big problem.

Population collapse is a good thing. We already have too many people in this world, causing environmental and housing issues. We can't keep ever growing as humanity, stabilisation or even a reduction is very good. It'll cause some short term cash flow and elderly care issues but we'll deal with that.

And AI so far is more of a hollow promise and hype. It's not a race, the way America is approaching it it's inevitably going to lead to a bubble collapse.