MurphyA/hacker-news huggingface dataset:
by giobox | 2026-01-23 18:23:37+00:00
> Don't think Apple wouldn't do the same.

Of course Apple offers a similar feature. I know lots of people here are going to argue you should never share the key with a third party, but if Apple and Microsoft didn't offer key escrow they would be inundated with requests from ordinary users to unlock computers they have lost the key for. The average user does not understand the security model and is rarely going to store a recovery key at all, let alone safely.

> https://support.apple.com/en-om/guide/mac-help/mh35881/mac

Apple will escrow the key to allow decryption of the drive with your iCloud account if you want, much like Microsoft will optionally escrow your BitLocker drive encryption key with the equivalent Microsoft account feature. If I recall correctly it's the default option for FileVault on a new Mac too.
by jacquesm | 2026-01-23 18:23:44+00:00
This list is very impressive, but it is the wrong approach. We simply need an EU alternative to Google, Microsoft, Apple, Twitter, Facebook, Amazon etc.

The closer to a drop-in replacement the better. Tying all of these functional bits and pieces together to form a consistent whole is just not going to happen. You need to approach this on a per-company level.

So, who will step up to the plate and re-implement as much of Google as necessary to catch 80% of the functionality and their EU customers?
by rasmus1610 | 2026-01-23 18:24:09+00:00
Very happy to see that I am not the only one. My pro subscription lasts maybe 30 minutes for the 5 hour limit. It is completely unusable and that's why I actually switched to OpenCode + GLM 4.7 for my personal projects and. It's not as clever as Opus 4.5 but it often gets the job done anyway
by christefano | 2026-01-23 18:24:14+00:00
That does sound annoying.

I have a dozen regularly typed words that I have had to set up string replacements for (in General -> Keyboard -> Text Replacement) to work around recorrect the autocorrect.

It used to be possible to tell autocorrect to ignore certain words and add them to the system dictionary (by typing the word, having jt autocorrected, hutting backspace and fixing the autocorrected word, and repeating the process 2 or 3 times), but that inexplicably stopped working for me a few years ago.
by noosphr | 2026-01-23 18:24:48+00:00
>The only options I have are to use and maintain old X11 linux distros myself. But eventually things like CA TLS and browsers just won't be feasible for me to backport and compile myself. Eventually I'm going to have to switch to using Windows. It's a sad, sad state of things.

Gentoo, duvian and all the bsds will keep x11 around until the heat death of the universe. Anyone who doesn't force systemd on their users also doesn't force Wayland. You have plenty of options before windows.
by kkarimipor12 | 2026-01-23 18:24:51+00:00
We are committed to making construction faster, simpler, and more affordable. Traditional building methods are expensive and time-consuming, so we designed a better way.
Our mission is to provide high-quality DIY building kits using insulated sandwich panels, giving homeowners and entrepreneurs the freedom to build modern, functional spaces without heavy labour or high costs.
With a focus on innovation, sustainability, and design, we help individuals and businesses unlock new possibilities in living and working.
by alfalfasprout | 2026-01-23 18:24:53+00:00
This is easily the most spot-on comment I've read on HN in a long time.

The humility of understanding what you don't know and the limitations of that is out the window for many people now. I see time and time again the idea that "expertise is dead". Yet it's crystal clear it's not. But those people cannot understand why.

It all boils down to a simple reality: you can't understand why something is fundamentally bad if you don't understand it at all.
by Proziam | 2026-01-23 18:24:54+00:00
Thank you for the comment!

I think the negative reaction people have comes from fear of punishment for human error, but fraud (meaning the real legal term, not colloquially) requires knowledge and intent.

That legal standard means that the risk of ruinous consequences for a 'lazy kid' who took a foolish shortcut is very low. It also requires that a prosecutor look at the circumstances and come to the conclusion that they can meet this standard in a courtroom. The bar is pretty high.

That said, it's very important to note that fraud has a pretty high rearrest (not just did it, but got arrested for it) rate between 35-50%. So when it gets to the point that someone has taken that step, a slap on the wrist simply isn't going to work. Ultimately, when that happens every piece of work they've touched, and every piece of work that depended on their work, gets called into question. The dependency graph affected by a single fraudster can be enormous.
by tshaddox | 2026-01-23 18:26:07+00:00
You said "The badness comes from inappropriate access to the data, not trying to find evidence of fraud." I disagree. I think that a blatantly bad faith partisan investigation demanded by a politician who stands for gain and executed by public servants would be bad even if they didn't inappropriately access this data. Both things are bad and would be still be bad independent of one another.
by unitexe | 2026-01-23 18:26:09+00:00
Personally, I am not interested in kubernetes, just podman for single-node use case. What the kube YAML does for this use case is provide a way to declare a multi-container application.

The podman documentation pages I have found most helpful for this use case are podman-kube-generate (generate kube YAML from an already running pod), podman-kube-play (run the kube manually) and podman-systemd.unit (run the kube as a service).
by Analemma_ | 2026-01-23 18:26:22+00:00
It's like the entire software industry is gambling on "LLMs will get better faster than human skills will decay, so they will be good enough to clean up their own slop before things really fall apart".

I can't even say that's definitely a losing bet-- it could very well happen-- but boy does it seem risky to go all-in on it.
by something765478 | 2026-01-23 18:26:28+00:00
> he was sent to the Slough House due to a mistake someone else made.

No, he was sent to Slough house over his reaction to that mistake. He disobeyed orders, caused panic at an airport, and assaulted a civilian. Now, that would have been fine if he was trying to save lives, but the whole thing was just a training exercise! He deliberately put people in danger just to massage his own ego; he absolutely deserved to be "exiled".
by postalcoder | 2026-01-23 18:26:54+00:00
I'm not sure how to do this on Windows, but to disable FileVault cloud key backup on Mac, go to `Settings > Users & Groups > click on (i) tooltip next to your account` and uncheck "Allow user to reset password using Apple Account".

This is a part of Settings that you never will see at a passing glance, so it's easy to forget that you may have it on.
by cweagans | 2026-01-23 18:27:32+00:00
Which is (and this is true) a power tool.

It's a decent analogy though: there are many tasks for which a CNC router would be an inappropriate tool choice (e.g. you can cut dovetails on a CNC router, but it's a pain in the ass and you probably could have cut them by hand in the time it takes to set up the cut on a CNC), but for tasks where the CNC router is a good fit, very few tools can beat it.
by wolvoleo | 2026-01-23 18:28:34+00:00
"enemy of the state" depends a lot on the current state of the state.

Eg in England you're already an enemy of the state when you protest against Israel's actions in Gaza. In America if you don't like civilians being executed by ICE.

This is really a bad time to throw "enemy of the state" around as if this only applies to the worst people.

Current developments are the ideal time to show that these powers can be abused.
by embedding-shape | 2026-01-23 18:28:42+00:00
> About European Product Hunt - very good idea.

Older members of HN will remember that Product Hunt probably came to life a lot because of HN and the submissions/comments from rrhoover (founder of Product Hunt). He's still active here, but before/during Product Hunt launch he was very active if I remember correctly.

Maybe a grander idea is a European Hacker News, that has the potential to spawn the European Product Hunts of tomorrow :)
by piccirello | 2026-01-23 18:29:10+00:00
In Apple's case, starting with macOS Tahoe, Filevault saves your recovery key to your iCloud Keychain [0]. iCloud Keychain is end-to-end encrypted, and so Apple doesn't have access to the key.

As a US company, it's certainly true that given a court order Apple would have to provide these keys to law enforcement. That's why getting the architecture right is so important. Also check out iCloud Advanced Data Protection for similar protections over the rest of your iCloud data.

[0] https://sixcolors.com/post/2025/09/filevault-on-macos-tahoe-...
by mixmastamyk | 2026-01-23 18:29:20+00:00
A few friends and I have thought similarly, although we focused on Apple first and the Google/Office suite second. We wrote our thoughts here: https://aol.codeberg.page/eci/ and the alternatives here: https://aol.codeberg.page/eci/status.html

I personally don't think it makes a lot of sense for consumers or small business to have to wrangle dozens of IT providers. How can we consolidate them?
by Sesse__ | 2026-01-23 18:29:37+00:00
> This would need a bit less space, and would be a bit slower.

I guess that is because the count storage update is really slow, right, so it's better to have one than two (or whatever number of set bits) operations? At least the linked code seems to process it one by one bit when updating, and without some sort of “rank of n-th set bit” operation (which would accelerate the “select” version fairly well), I'm not sure it could be made much faster than that either.

Edit: I see https://github.com/FastFilter/fastfilter_java/blob/master/fa... tries to make that operation in O(1), but to be honest, with this many operations, the cure almost looks worse than the disease. :-) Haven't benchmarked, though.
by ppchain | 2026-01-23 18:29:50+00:00
The point they seem to be making is that AI can "orchestrate" the real world even if it can't interact physically. I can definitely believe that in 2026 someone at their computer with access to money can send the right emails and make the right bank transfers to get real people to grow corn for you.

However even by that metric I don't see how Claude is doing that. Seth is the one researching the suppliers "with the help of" Claude. Seth is presumably the one deciding when to prompt Claude to make decisions about if they should plant in Iowa in how many days. I think I could also grow corn if someone came and asked me well defined questions and then acted on what I said. I might even be better at it because unlike a Claude output I will still be conscious in 30 seconds.

That is a far cry from sitting down at a command like and saying "Do everything necessary to grow 500 bushels of corn by October".
by thaumasiotes | 2026-01-23 18:29:53+00:00
> In most builds mpv has yt-dlp integrated, you can directly pass the URL to it.

Last time I was passing youtube URLs to mpv, it relied on having an executable named youtube-dl.exe somewhere visible to the mpv executable. To get it to work with yt-dlp, I had to copy and rename the yt-dlp executable.

> has yt-dlp integrated

Have they switched to supplying their own youtube downloader instead of just working with whatever you happen to have in your path?
by gruez | 2026-01-23 18:29:55+00:00
>I think that a blatantly bad faith partisan investigation

Sounds like you agree with me, because you're still not objecting to my original premise of "we shouldn't be trying imply that intending to overturn elections in cases of fraud is bad in and of itself". You might think "bad faith partisan investigation" is bad, but not the act of trying to overturn elections itself.
by ferrouswheel | 2026-01-23 18:30:45+00:00
It's interesting how many comments these days are like, "well of course".

Back in the day hackernews had some fire and resistance.

Too many tech workers decided to rollover for the government and that's why we are in this mess now.

This isn't an argument about law, it's about designing secure systems. And lazy engineers build lazy key escrow the government can exploit.
by magicalist | 2026-01-23 18:31:10+00:00
> No more discussions about interesting problems and creative solutions that people come up with. It's all just AI, agentic, vibe code.

And then you give in and ask what they're building with AI, that activation energy finally available to build the side project they wouldn't have built otherwise.

"Oh, I'm building a custom agentic harness!"

...
by peter_d_sherman | 2026-01-23 18:31:19+00:00
>This started as a personal project because I wanted a clean, searchable dataset of startups across regions without jumping between multiple sources or dealing with noise I didn't want :).

I love this idea!

Something like that really needs to be done, and you've stepped up to the plate to begin that journey of putting all of that together!

A list of ALL startups, in one place, would really be great!

One question/caveat though -- how do you determine / how would you determine if a startup is no longer in startup mode?

That is, if the startup has become a big business, if the startup has been acquired, if the startup has failed, etc., etc.?

I guess (if the correct data wasn't present or unavailable or hard to parse, etc.) you could simply take startups off the last after a fixed time period, like maybe 12 months, 24 months, <?> months, ?.

Or, maybe add a retrieval date and source...

Two extra fields for your database... the date when it was spidered/sourced/parsed/found/uploaded/etc, and the source URL (or URL's...).

Then you could keep all of the data for all time... just let your users sort/filter on that retrieval date, for "freshness" of data, relative to their needs...

Anyway, looks great so far!

Great work!
by maxnevermind | 2026-01-23 18:31:26+00:00
> verified with human use

Quality of that verification matters, people who might use AI tend to cut corners. This does not completely solve problem with AI slop imo and solution quality. You ask Claude Code to go and implement a new feature in a complex code base, it will, the code might even work, but implementation might have subtle issues and might be missing the broader vision of the repo.
by Twirrim | 2026-01-23 18:31:29+00:00
Over a decade ago I was working for AWS on Glacier, we jokingly pitched an April fools day article about how Glacier stores customer data on vinyl records, and that 9 out of 10 customers preferred the feel of their data when restored.

AWS doesn't (or didn't) do April Fools day bits, so it didn't go anywhere, but the idea did amuse us in the team for a bit.
by vee-kay | 2026-01-23 18:31:58+00:00
Proton's reputation is not one to be proud of.

In India, the Indian government suspended VPN services in Jammu&Kashmir (J&K) state after a bloody terror attack (in Pehelgam Baisaran valley (a popular tourist spots) where 26 tourists were gunned down in cold blood by jihadi Pakistani terrorists who infiltrated from across the border).

https://en.wikipedia.org/wiki/2025_Pahalgam_attack

However, Proton company has been blatantly touting its VPN services in J&K with the dangerous incitement to evade the Indian government scrutiny.

This was Proton's message:
"In Jammu and Kashmir, police have been conducting random stops and house-to-house checks inspecting mobile phones to enforce a local ban on VPNs. A reminder that Proton VPN's mobile app has a "Discreet icon" setting to help disguise it."

https://tfipost.com/2026/01/profit-over-people-proton-vpn-ge...

Such dangerous messaging was even after Proton Mail was blocked in India, because it was found that terrorists and perverts were using it for terror communications and digital sexual abuse.

https://www.thehindu.com/news/national/karnataka/courts-cann...

But Proton refused to comply with India's new cybersecuriy laws and investigations into such subversive activities. Instead, Proton removed its servers from India.

https://telecom.economictimes.indiatimes.com/news/now-proton...

So yeah, use Proton at your own risk.
by bluGill | 2026-01-23 18:32:01+00:00
Polk County Iowa is where Des Moines is - the largest city in Iowa. (I live the next county over, but I bike to Polk county all the time) This is not a good location to run this because the farm land is owned by farmer/investors or farmer/developers - either way everybody knows the farm will become a suburb in the next 20 years and has priced accordingly (and if the timeline is is less than 5 years they have switched to mining mode - strip out the last fertility before the development destroys the land anyway). Which is to say you can get much better land deals elsewhere (and by making your search wider) - sometimes the price might be higher but that is because the land/soil is better.

Overall I don't think this is useful. They might or might not get good results. However it is really hard to beat the farmer/laborer who lives close to the farm and thus sees things happen and can react quickly. There is also great value in knowing your land, though they should get records of what has happened in the past (this is all in a computer, but you won't always get access to it when you buy/lease land). Farmers are already using computers to guide decisions.

My prediction: they lose money. Not because the AI does stupid things (though that might happen), but because last year harvests were really good and so supply and demand means many farms will lose money no matter what you do. But if the weather is just right he could make a lot of money when other farmers have a really bad harvest (that is he has a large harvest but everyone else has a terrible harvest).

Iowa has strong farm ownership laws. There is real risk he will get shutdown somehow because what he is doing is somehow illegal. I'm not sure what the laws are, check with a real lawyer. (This is why Bill Gates doesn't own Iowa farm land - he legally can't do what he wants with Iowa farm land)
by aspbee555 | 2026-01-23 18:32:48+00:00
this was the main reason I switched to nginx a long time ago, I never trusted .htaccess as it is by default dangerous. Sure you can lock it down more, but the default being dangerous concerned me. To be honest dotfiles are just potentially dangerous if exposed too, so in my nginx I always do

location /.well-known { allow all; }

location ~ /\.[^/].*(?<!\.well-known) { return 404; }

(The well-known being allowed is for letsencrypt to function)
by smt88 | 2026-01-23 18:32:56+00:00
I used to feel the way you do, but as I've gotten older, learned more about the fields, and met more researchers, I've come to disagree. Calling them science is a farce. We should put money into them and continue most of these areas of research, but we shouldn't pretend they're reaching firm, quantifiable, scientific conclusions.

The replication crisis really should have hammered this home to everyone by now.
by Melatonic | 2026-01-23 18:33:30+00:00
Exactly. And any halfway decent corporate IT setup would be managing the keys themselves as well (although I would imagine many third party tools could also be compelled to do this with a proper warrant)

Bitlocker on by default (even if Microsoft does have the keys and complies with warrants) is still a hell if a lot better than the old default of no encryption. At least some rando can't steal your laptop, pop out the HDD, and take whatever data they want.
by badsectoracula | 2026-01-23 18:33:39+00:00
FWIW Free Pascal and Lazarus communities and developers are largely European and there isn't a single company behind them. Though at the same time there are also several devs from outside EU so i do not think it can be called a "EU alternative" - which is the case for most FLOSS projects actually.

Some projects, especially high profile ones, do have US companies behind them (e.g. Google, etc) so you could claim they are US-centric, but at this point it becomes a question of why you are looking for an EU alternative. If it is to help EU businesses (like others mentioned), then unless you financially support these US companies (either directly or indirectly via, e.g., your data) it doesn't matter if the FLOSS project you are using is made by them or not.
by bigbadfeline | 2026-01-23 18:33:49+00:00
> Headline doesn't match his thoughts.

Well, your own quote of Nadella seems to match perfectly if you see through the buffoonery:

> "this would be a bubble ... if only tech groups were benefiting from the rise of AI, rather than companies in other sectors."

Translating from weasel-speak:

The "companies in other sectors" can be "benefiting from the rise of AI" only if they adopt some AI which, not quite coincidentally, is sold and pushed by Nadella's organization among others.
by 9rx | 2026-01-23 18:34:22+00:00
It is trying to take over the job of the farmer. Planting, harvesting, etc. is the job of a farmhand (or custom operator). Everyone is working to try to automate the farmhand out of a job, but the novelty here is the thinking that it is actually the farmer who is easiest to automate away.

But,

"I will buy fucking land with an API via my terminal"

Who has multiple millions of dollars to drop on an experiment like that?
by jacquesm | 2026-01-23 18:34:30+00:00
Excellent question and great to see you thinking in the same direction.

Consolidation of various open source projects is underway with projects such as owncloud but it is still very fragile and hard to maintain.

I think a pledge never to be bought out and a way to restrict stock to EU UBOs would be one step in the right direction, then you'll need a massive amount of capital to pull this off. But maybe the climate is finally right to raise a proper amount of money for such an undertaking.
by Pulcinella | 2026-01-23 18:34:44+00:00
Apple devs are probably doing something with the touch returned by the touchUpInside callback. This is an extremely, extremely common bug in iOS apps, not just with Apple developed software.

Devs love the symmetry of their touch handling code and often have the finger-down, finger-moved, and finger-up callbacks from the system all call the same handleTouch function they wrote. As you can tell, however, the touch from the finger up callback is often better discarded or handled differently otherwise you get these sort of bugs
by NicuCalcea | 2026-01-23 18:35:02+00:00
It feels like more of a semantic challenge rather than a technical one. What does it mean to grow corn? Is Bill Gates a farmer if he owns farmland and has people grow corn on it? Am I designing a logo if I just email someone who can do it, even if I have some input?

The fact that AI can buy a piece of farmland and hire an actual farmer to come work the land doesn't seem that impressive to me. The vending machine experiments proved AI can manage a small business, if not very well: https://www.anthropic.com/research/project-vend-1