MurphyA/hacker-news huggingface dataset:
Show HN: DailyNote – one-note-per-day app with local-first encryption
by katspaugh | 2026-01-01 19:04:22+00:00
Hi HN and Happy New Year!

I built DailyNote, a minimalist daily notes app: one note per day, a year-at-a-glance calendar, and local-first storage.

The interesting bit is the encryption + sync model:

- Notes are always encrypted locally before syncing to Supabase.
- A dedicated data key (DEK) encrypts notes; your password only wraps that DEK (KEK).
- So when you change your password, it just re-wraps the DEK — no re-encryption of note data.

I built the whole project in one day using Claude + Codex with a spec‑driven approach (tight PRD → implementation). It’s React/TypeScript, IndexedDB for local persistence, and optional cloud sync.

Demo: https://dailynote.xyz/

Repo: https://github.com/katspaugh/dailynote

Would love feedback on the crypto model, UX, or anything else.
by pjerem | 2026-01-01 19:04:29+00:00
While you are totally right, it doesn't means we are all good and/or equal when it comes to fulfilling our fundamental human needs.

Your exemple is in fact good because a hella lot of people find exercice to be exactly a "dull chore". Same as eating healthy actually.

So, mentioning that socializing can be, for some people, a chore doesn't go against the fact that it is something essential.

You can even be conscious about it and still don't like it : I hate exercising but i still do it because, well, it's needed.
by Brian_K_White | 2026-01-01 19:05:03+00:00
It is abuse.

It's not a flavor of ice cream.

It's an intentional act performed by a party upon another party, in the full conscious deliberate knowing intent to do something other than be nice or even neutral to the other party, but to bother and annoy them, to consume attention and time that they did not willingly give.

It's not the worst crime of the century and so it is a small abuse, but abuse is still the correct word. And it's not a small abuse when performed on a million people instead of one.

If you don't think so then you must be ok with me stealing a single cent from you, and everyone else. Surely you merely dislike that and would defend my behavior against anyone trying to do something so dramatic and hyperbolic as to involve law enforcement over something so small.
by randycupertino | 2026-01-01 19:05:08+00:00
> Three men have been arrested in connection with a gift card cloning scheme that Texas authorities say netted an estimated $14 million.

> Authorities said the men would take gift cards from store shelves without paying for or activating them. They would then take the cards to another location and carefully open the packaging to steal the electronically stored number from the back of the card.

> “They put it either on another card or just store it in a computer system,” Haecker said.

> The suspects would then repackage the cards and return them to stores, placing them back where they originally found them.
Show HN: Tools for Humans – Public Tracker for Workflows
by dm03514 | 2026-01-01 19:05:15+00:00
Hello! I'm working on building out graph-based tools for humans!

Our first offering is a public tracker view, similar to the tracker provided by pizza companies in the US!

The goal is to enable companies to reduce status emails and build brand trust!

TurboOps are built on "workflows" which are just DAGs. We have a lot more plan but are focused on makers right now!

It's free to get started and to try it out, and build public graphs!

I'd really appreciate your thoughts, impressions, and/or criticisms.

Thank you!

danny@turbolytics.io
by HumblyTossed | 2026-01-01 19:05:29+00:00
It's a great tool, but right now it's only being used to feed the greed.

>> Again, I guess no one knew AI would be as big as it is today, and it is only just started.

People have been saying similar about self driving cars for years now. "AI" is another one of those expensive ideas that we'll get 85% of the way there and then to get the other 15% will be way more expensive than anyone will want to pay for. It's already happening - HW prices and electricity - people are starting to ask, "if I put more $ into this machine, when am I actually going to start getting money out?" The "true believers" are like, soon! But people are right to be hugely skeptical.
by rapidfl | 2026-01-01 19:06:25+00:00
+1. A WhatsApp group with 10-20 ppl (in similar stages of life) worked well for a while for organizing hiking/tennis/squash/some sport/DotA. We got consistently 4-5 people including their spouses showing up. Usually 2-4 weekends a month. With that size, many people can comfortably pass on the invite.

Then organically these tend to turn into trips together or simple hangouts for someone's birthday or a holiday.
by max_lt | 2026-01-01 19:06:50+00:00
Deno core is great and I didn't really abandon Deno – we support 5 runtimes actually, and Deno is the second most advanced one (https://github.com/openworkers/openworkers-runtime-deno). It broke a few weeks ago when I added the new bindings system and I haven't had time to fix it yet. Focused on shipping bindings fast with the V8 runtime. Will get back to Deno support soon.
by avar | 2026-01-01 19:06:57+00:00
> Steve Jobs himself envisioned a
> web app future as the future of[...]

I'm not putting cynical motivations past Apple, but you're reading too much (or too little?) into what Jobs said at the time.

His remarks at the time of the initial iPhone release (with the benefit of hindsight) were clearly because they weren't ready to expose any sort of native API's when iOS was initially released.

Pissing on you and telling you it's raining was typical Jobs reality distortion field marketing, and not an indication that he actually believed it was raining.
by andrewaylett | 2026-01-01 19:07:16+00:00
Honestly, for my own stuff I only need one PoP to be close to my users. And I've avoided using Cloudflare because they're too far away.

More seriously, I think there's a distinction between "edge-style" and actual edge that's important here. Most of the services I've been involved in wouldn't benefit from any kind of edge placement: that's not the lowest hanging fruit for performance improvements. But that doesn't mean that the "workers" model wouldn't fit, and indeed I suspect that using a workers model would help folk architect their stuff in a form that is not only more performant, but also more amenable to edge placement.
by samiv | 2026-01-01 19:08:51+00:00
Yeah theres the "progressive overload" + volume camp.

It can work.. the problem is that if you do too little you get no result, if you do too much you burn out. So you have to manage both volume and intensity so that you have a progressive overload. This is difficult.

Easier way is to just ignore the volume in the first place, train as hard as you can (so go to failure, or very close), for maximal effort, i.e. increase the intensity then RECOVER then go back to the gym when you're no longer sore.

This is much easier routine to follow and it will produce development assuming other factors (quality of sleep and nutrition) are in check.

So therefore a shortcut summary is to forget about the volume, focus on the intensity and then make volume follow your capacity to recover. Avoid injuries and burnout while precipitating growth.

Using the bench press example again, in a volume program I might do

6 sets of 6 reps for a total of 36 reps. Since I'm doing so much volume it's clear that my first 5 sets will not be challenging because with this amount of sets I HAVE to save my energy for 6 sets. MAYBE the last rep or two in the last set will be what will start challenging me. So I'd say that with this volume workout you get 2 reps out of 36 that are "progressive". That's 5% and 95% of my work is just junk that produces only wear and tear.

In high intensity method I continue with drop sets after I fail. So.. let's say I do my initial set, 8 reps until I fail, I drop weights and do 3 more reps until I fail, I drop the weights and do 2 more reps. And then I'm done and that's the workout. My total reps are 13 but there are at least 5 reps that are in the zone that challenges me. That's 5/13 for 38%.
by LorenPechtel | 2026-01-01 19:09:07+00:00
Radicalization??

No. Yes, there were a few attacks on aid trucks. People who saw aid going to those who were holding Israeli hostages. You realize Israel was under no legal obligation to permit the aid? Don't chant "Geneva", it only requires allowing aid to non-combatants. When there is even a reasonable threat of diversion to military purpose the obligation goes away--and there was not only a reasonable threat, but the vast majority was being diverted.

The only appreciable Geneva violation that Israel engaged in is not sending notice of suspected misuse of civilian things--but this is of no actual importance as the rule exists to avoid mistakes. It wasn't written with a situation where civilian cover was used to the greatest extent possible. For them to have simply said "everything is being misused" would have been a pretty good approximation of the truth.
by lutusp | 2026-01-01 19:10:04+00:00
> The use of ln 2 for argument range reduction has nothing to do with half lives.

That is a false statement.

> In fact, only doubling or halving times are directly measured for radioactive decay or population growth.

That is a false statement -- in population studies, as just one example, the logistic function (https://en.wikipedia.org/wiki/Logistic_function) tracks the effect of population growth over time as environmental limits take hold. This is a detailed model that forms a cornerstone of population environmental studies. To be valid, it absolutely requires the presence of e^x in one or another form.

> ... because the numbers are represented as binary numbers in computers and the functions are evaluated with approximation formulae that are valid only for a small range of input arguments.

That is a spectacularly false statement.

> There is no difference in the definition set between 2^x and e^x.

That is absolutely false, and trivially so.

> No, you did not try to understand what I have written.

On the contrary, I understood it perfectly. From a mathematical standpoint, 2^x cannot substitute for e^x, anywhere, ever. They're not interchangeable.

I hope no math students read this conversation and acquire a distorted idea of the very important role played by Euler's number in many applied mathematical fields.
by constantcrying | 2026-01-01 19:10:04+00:00
>I am sorry, but comments like this are caused by the naivety of not knowing how the function evaluations are actually implemented.

I am sorry, but comments like this are caused by the naivety of not knowing a single things about mathematics.

Do you not understand that mathematics is not just about implementation, but about forming models of reality? The idea of trying to model a physical system while pretending that e.g. the solution of the differential equations x'=x does not matter is just idiotic.

The idea that just because some implementation can avoid a certain constant, that this constant is irrelevant is immensely dumb and tells me that you lack basic mathematical education.
by Mawr | 2026-01-01 19:10:12+00:00
Total nonsense. You've taken a very specialized observation and presented it as general truth. Can't do that.

Yes, once you get to the level of being able to compete with others, genetic factors will determine who will do better. This is true in any sport.

But that has no bearing on your average person deciding to go to the gym or not. Just about everyone will experience massive benefits from going to the gym regularly. Most don't have the capacity to compete, but that's not what 99% of people care about.

So the #1 factor is not, in fact, genetics, but doing the thing consistently.

As such, this is irresponsible nonsense to be spreading around.
by brokencode | 2026-01-01 19:11:09+00:00
Opinions vary.

There are those who think massive concentration of wealth is not a problem at all and is just a product of healthy capitalism. Tax is theft, and individual property rights are above all else.

There are others who want some kind of communist revolution, where the entire structure of society and property ownership is changed. The workers should benefit from their work as much as the managers.

Personally, I feel like there's a middle ground to hit. We should be able to make changes to our current system in the US without needing anything too radical.

We have some good examples from the last century, such as trust busting, the New Deal, and the Great Society. These programs made major improvements without changing the country's fundamental economic system or growth trajectory.
by thundergolfer | 2026-01-01 19:11:14+00:00
A lot of people here are commenting that if you have to care about specific latency numbers in Python you should just use another language.

I disagree. A lot of important and large codebases were grown and maintained in Python (Instagram, Dropbox, OpenAI) and it's damn useful to know how to reason your way out of a Python performance problem when you inevitably hit one without dropping out into another language, which is going to be far more complex.

Python is a very useful tool, and knowing these numbers just makes you better at using the tool.
The author is a Python Software Foundation Fellow. They're great at using the tool.

In the common case, a performance problem in Python is not the result of hitting the limit of the language but the result of sloppy un-performant code, for example unnecessarily calling a function O(10_000) times in a hot loop.

I wrote up a more focused "Python latency numbers you should know" as a quiz here https://thundergolfer.com/computers-are-fast
by indigoabstract | 2026-01-01 19:11:30+00:00
I think it's more in the spirit of playfulness, like in "don't take yourself too seriously". It's why people want to mod Minecraft and Doom for example.

Because it's fun.

I can totally understand why you wouldn't want to do this though - the plethora of incompatible lisp dialects come to mind. That's why I said it was controversial.
by toast0 | 2026-01-01 19:12:10+00:00
> Vulnerability research is demonstrably not useful for improving the security of the ecosystem in the long haul. That's where sandboxing, hardening, and good engineering hygiene come into play. If you're writing a browser or a video decoder in C/C++, you're going to have exploitable bugs.

IMHO, vulnerability research is the stick that drives the ecosystem towards all those things. Reports of vulnerabilities in the codec for Rebel Assult videos (or whatever) leads one to disable codecs other than those they need. Reports of vulnerabilities in playlist support leads one to disable playlist support where it's unnecessary and run transcodes in a chroot sandbox with no network access. Reports of buffer oveflows leads one to prefer implementation in memory safe languages where available with sufficient performance and also to sandbox when possible.
by locknitpicker | 2026-01-01 19:12:51+00:00
> What if we hosted the cloud... on our own computers?

The value proposition of function-as-a-service offerings is not "cloud" buzzwords, but providing an event-handling framework where developers can focus on implementing event handlers that are triggered by specific events.

FaaS frameworks are the high-level counterpart of the low-pevel message brokers+web services/background tasks.

Once you include queues in the list of primitives, durable executions are another step in that direction.

If you have any experience developing and maintaining web services, you'll understand that API work is largely comprised of writing boilerplate code, controller actions, and background tasks. FaaS frameworks abstract away the boilerplate work.
by kachapopopow | 2026-01-01 19:13:39+00:00
I genuinely mean that, fly.io (although as unreliable as it might seem) is already around ~5x to 10x cheaper depending on use case, depending on some services it's actually <infinity> times cheaper because it's actually completely free when you self host!

GCP pricing is absolutely wicked when they charge $120/month for 4vcore 16gb ram, can get around 23 times more performance and 192gb ram for $350/month with Xtbps-ish ddos protection.

I have 2 2x7742 1tb ram each, 3 9950x3ds 192gb ecc, 2 7950x3d's all at <$600/month obv the original hardware cost in the realm of $60k - the epyc cpu's were bought used for around $1k each so not a bad deal, same with ram overall the true cost is <20k. This is entirely for personal use and will last me more than a decade most likely unless there are major gains in efficiency and power cost continues to grow due to AI demand. This also includes 100tb+ hdd of storage and 40tb of nvme storage all connected with 100gbps switch pair for redundancy for a cheap cheap price of $500 for each switch.

I guess I owe some links: (Ignore minecraft focused branding)

https://pufferfish.host/ (also offers colocation)

telegram: @Erikb_9gigsofram direct colocation at datacenter (no middlemen / sales) + good low cost bundle deal

anti-ddos: https://cosmicguard.com/ (might still offer colocation?)

anti-ddos: https://tcpshield.com/
by brabel | 2026-01-01 19:14:26+00:00
I am not a Kiwi but was in Rotorua once, just wanted to say it is a lovely town (there was a sign claiming it was the nicest town in NZ!) and I loved the geyser and boiling mud! Must be funny to live with the sulphur smell and not even noticing except when you leave and come back after a while.
by crazygringo | 2026-01-01 19:15:03+00:00
> go to Settings > Battery, where you'll see a breakdown of battery consumption by app

And what percentage of users do you think ever check that, or even know it's there to check?

> If that's a problem for web browsers, then it's a problem for every single app in the app store.

No it's not, the app store disallows arbitrary code execution.

> There's nothing really unique about a web browser app that makes it more risky than any other app.

Yes there is -- JavaScript.

> Javascript is already very much sandboxed.

...by Safari. It wouldn't be if you allowed any developer to write their own JavaScript interpreter as part of their own browser.

> If web standards are standards, then let other web browsers on iOS.

That's a non-sequitur.
by prajwal299 | 2026-01-01 19:15:43+00:00
I was researching and learning about LLM inference optimizations last week, and thought it would be cool to turn the learnings to a short video explainer. I have zero experience in video creation. I thought I'll see if I can build a system (I am a professional software engineer) using Claude Code to automatically generate video explainers from a source topic. I honestly did not think I would be able to build it so quickly, but Claude Code (with Opus 4.5) is an absolute beast that just gets stuff done.

Here's the code - https://github.com/prajwal-y/video_explainer
Some cool features that I added:

- Automated script/narration generation from the source material (using your favorite LLM).
- Fully automated video generation from the script using remotion.
Natural language editing of videos. Just use a CLI tool to give feedback, and the system goes back and fixes the video (using Claude Code in headless mode internally LOL).
- TTS built in, but also easy way to bring your own voiceovers and sync to the video scenes automatically (using Whisper transcription).
- AI background music and sound effects.
- A CLI tool to interact with various components in the pipeline.

The first video I generated using this pipeline (an explainer of AI inference optimizations) - https://www.youtube.com/watch?v=SyFcoaIVad4
Everything in the video was automatically generated by the system, including the script, narration, audio effects and the background music (all code in the repository). I however did the voiceover as the TTS was too robotic (although the system generated the script for me to read haha).

I'm absolutely mind blown that something like this can be built in a span of 3 days. I've been a professional software engineer for almost 10 years, and building something like this would've likely taken me months without AI. I truly believe now that our profession is going to change dramatically in the next few years.
Show HN: Generating self-enumerating pangrams with constraint solving on the Web
by nels_martin | 2026-01-01 19:15:57+00:00
Through taking the excellent CSE 507 class at UW (Solver Aided Programming) I learned about Rosette, a Racket-based programming system that interfaces with SAT/SMT solvers.

I applied Rosette to the problem of generating autogramic pangrams, aka self-enumerating pangrams: sentences that contain every letter of the alphabet AND describe themselves.

The front end (NextJS/Vercel) passes constraints to a Dockerized Rosette program hosted on Cloud Run.

Feedback and comments welcome! And Happy New Year!
by utopiah | 2026-01-01 19:16:12+00:00
DX?

I'm quite ignorant on the topic (as I never saw the appeal of Cloudflare workers, not due to technical problems but solely because of centralization) but what does DX in "goal has always been the same: run JavaScript on your own servers, with the same DX as Cloudflare Workers but without vendor lock-in." mean? Looks like a runtime or environment but looking at https://github.com/drzo/workerd I also don't see it.

Anyway if the "DX" is a kind of runtime, in which actual contexts is it better than the incumbents, e.g. Node, or the newer ones e.g. Deno or Zig or even more broadly WASI?
by Brian_K_White | 2026-01-01 19:16:37+00:00
I had Yellowdog on mine from the day I bought it until the day Sony erased it. It was not useful. I don't regret doing it and I HATE that they took it away, and I'm a linux/bsd/various-unix daily driver home and work since forever, but this linux system on this hardware was just a curiosity to play with. Too slow and limited by the hardware to be useful.

But it was fun.
by crazygringo | 2026-01-01 19:16:40+00:00
> Safari is the modern IE.

That's not true. It's not even available on most computers. IE was about Microsoft not following web standards and abusing its monopoly position; Safari is a minor browser by overall market share and is broadly standards-compliant.

> the fact that PWAs didn’t take off in the last decade js purely due to Safari.

So then why aren't PWA's super-popular on Windows and on Android? Since Safari doesn't affect those?
by bgwalter | 2026-01-01 19:16:55+00:00
Maybe they should hire Mario Nawfal for their announcements:

"""
BREAKING: AI FOUND VULNERABILITY IN FFMPEG!

After decades of human struggle, humans no longer call the shots.

Pwno decided to take the leap. They did not just find a vulnerability---they found a BOMBSHELL! What took developers weeks to write, AI analyzed in SECONDS!
"""
by bruce511 | 2026-01-01 19:17:05+00:00
Takeoffs are substantially more hazardous than landing. The margin for error is small, and the options for handling the unexpected are minimal.

To be clear, take-off is more than just the runway. It extends to the point where the aircraft has sufficient energy, which can be translated into time.

Flying a plane is all about energy. Speed, and altitude. One can be traded for another and both can be traded for time. In other words, the faster the plane, the higher the plane, the more options available to the pilot.

The most dangerous part of the flight is the initial climb just after takeoff. Speed is low. Height is very low. You are literally flying away from the runway. If an engine or 2 fail at this point crashing is a likely outcome. However how, and where, you crash matters a lot.

By contrast landings are much safer, the airplane has excess energy to play with, and is heading directly at a nice long flat piece of ground.

Auto-pilot takeoffs are "easy" only to the V2 mark, then they can get very complicated very quickly.