MurphyA/hacker-news huggingface dataset:
by mmis1000 | 2026-01-26 12:05:28+00:00
The guarantee of web page never edit file on your disk(only create new ones) does not hold on this api though. I know
it's what makes this api useful. But at the same time, there is big risk that user never expected this and results into giant security issue.

Firefox and safari are generally very conservative about new api that can enable new type of exploits.

At least firefox and safari does implement origin private file system. So, while you can't edit file on user disk directly. You can import the whole project into browser. Finish the edit and export it.
Show HN: Axiom SQL-Reflex – Execution-aware multi-agent Text-to-SQL system
by dspraneeth | 2026-01-26 12:06:19+00:00
Hi HN, I built a fully local, execution-aware multi-agent Text-to-SQL system as a learning/research project.

It uses schema grounding (graph-based), multi-model SQL generation, execution sandboxing, and semantic validation instead of relying on prompting alone.

Evaluated honestly on Spider:
• ~55% accuracy on single DB
• ~34% cross-DB zero-shot

No APIs, no fine-tuning, everything runs locally.

Would appreciate feedback on the architecture and evaluation.
by Schmerika | 2026-01-26 12:06:29+00:00
> it isn’t mod actions

It's intentional inaction. From the mods.

This post, and many many others, ought to have been unflagged.

So, so, so many popular and active stories about Musk and DOGE and Trump have been removed this past year, while at the same time Garry Tan and PG were cheering them on on their Twitter feeds.

People who call this out too much get banned. For super unrelated reasons, apparently.

Dang has explicitly disallowed any and all posts talking about the weaknesses of the flag system. IT'S PROTECTED.
by weitendorf | 2026-01-26 12:07:32+00:00
It does have real tradeoffs/flaws/limitations, chief among them, Run isn't allowed to "become" Kubernetes, you're expected to "graduate". There's been an immense marketing push for Kubernetes and Platform Engineering and all the associated SAAS sending the same message (also, notice how much less praise you hear about it now that the marketing has died down?).

The incentives are just really messed up all around. Think about all the actual people working in devops who have their careers/job tied to Kubernetes, and how many developers get drawn in by the allure and marketing because it lets them work on more fun problems than their actual job, and all the provisioned instances and vendor software and certs and conferences, and all the money that represents.
by Krssst | 2026-01-26 12:07:44+00:00
Yes, Windows 11 Home has FDE and I used it, but no password unlock. Attempting to switch to password unlocking will result in an error saying that password unlocking is not available in the current Windows edition. TPM based unlocking did work on Home for example. (but required entering the recovery key after every reboot to Fedora for some reason).
by Tade0 | 2026-01-26 12:07:48+00:00
They are, but in the sense of net productivity gains.

Responsible people who use their knowledge to review LLM-generated code will produce more - up to their maximum rate of taking responsibility.

Irresponsible people will just smear shit all over the codebase.

The jury is out what's the net effect and the agents' level of sophistication is a secondary factor.
by baxtr | 2026-01-26 12:08:17+00:00
Downvotes might happen because your comment reads one-sided.

What about Russia blocking sites?

As of late 2025 and early 2026, Russia has blocked numerous foreign communication, social media, and information services, restricting platforms like WhatsApp, Telegram (partially), Signal, Viber, FaceTime, Snapchat, Facebook, Instagram, and YouTube. Many independent news, VPN services, and foreign websites (e.g., Chess.com) are also inaccessible
by Imustaskforhelp | 2026-01-26 12:08:18+00:00
> It does not require either party to have the other's ID.

Sure but that's literally not my point.

It's still an interception because the govt is still decided who can communicate (essentially) or not.

You cannot communicate with a vps provider if they don't have your ID and this condition being forced as a requirement otherwise the UK govt.s gonna jail and sue into literal millions is much akin to an interception in basically everything.
by mdavid626 | 2026-01-26 12:08:20+00:00
Yes, that's true.

But I'm always a bit sceptical about such approaches. They are not universal. You still need glibc/musl to be the same on the target system. Also, if you compile againt new glibc version, but try to run on old glibc version, it might not work.

These are just strange and confusing from the end users' perspective.
by Traster | 2026-01-26 12:09:04+00:00
>I wondered, “Who is this feature even for? Who will use it?” No one on my team knew.

I think there's another key here - Don't assume someone else knows something. If you don't know why something is done some way, find out who does and make sure they do. I've been in so many situations where the organization gets complex - person A is loaned over here or person B is working on project X because team Y needed feature Z. So frequently you'll find out that core assumptions have been made because everyone involved was only half-involved and either kind of assumed someone else was taking care of it, or (more frequently) knows the assumption is wrong but is choosing not to say so for political reasons.
by lizknope | 2026-01-26 12:10:26+00:00
15-30 years ago I managed a lot of commercial chip design EDA software that ran on Solaris and Linux. We had wrapper shell scripts for so many programs that used LD_LIBRARY_PATH and LD_PRELOAD to point to the specific versions of various libraries that each program needed. I used "ldd" which prints out the shared libraries a program uses.
by altern8 | 2026-01-26 12:11:12+00:00
Linux is great, but IMO macOS is vastly superior to both Windows (by far) and all Linux distros I tried.

It's keyboard-centric and its shortcuts are much easier and quicker to use. For instance, CMD + left/right arrow for home vs having to reach for the home/end button. CMD + Q ("quit") vs. (I
think?) alt + F4. CMD + C still works in the terminal, shortcuts are always the same across apps, etc.

It's extremely consistent across apps and dialog boxes, which isn't the case with Windows and even less Linux. For instance, from any app browsing for a file will open the file browser with my preferred settings, bookmarks, and position. All apps handle high-DPI correctly and consistently. Most UIs follow Apple-provided guidelines, shortcuts are consistent across apps, etc.

While not required, it focuses on drag and drop vs. clicking, which is much quicker and 100 times easier to use. For instance, dragging a file from a folder to a "Browse" dialog box to select the file vs. clicking 100 to navigate to it.

Most importantly, most of the times things just work. To install apps you normally just drag an icon into the Applications folder. Windows still makes you restart in certain cases (because it locks files, I think), Linux still has the problem that app developers don't provide easy-to-use installers.

Obviously this comes down to personal preference.

Windows is just a disgrace despite being the most popular OS for 40 years but it's good for gaming. Linux gives you the freedom to do whatever you want and fix things if you don't like them. macOS normally provides a consistent experience if you just want the thing to work and move on.
by surgical_fire | 2026-01-26 12:11:47+00:00
> Apple is absolutely trying to make your experience of an older iProduct craptastic. But... so is everyone else in the industry. It's just that Apple, who once made very decent products, had much higher from which to fall.

My personal laptop is a 7 year old Dell G5 running Linux Mint.

My experience using that on a daily basis is actually pretty decent. Very smooth sailing. It is good enough that I keep postponing my decision to get a new machine.

So, no. This is an Apple problem, not "everyone else in the industry".
Tell HN: Merritt Dawsley" appears to be a synthetic recovery persona
by mayakovic | 2026-01-26 12:11:52+00:00
I am writing this to document a specific Social Engineering (SocEng) campaign targeting victims of previous crypto hacks, centered around a persona identifying as "Merritt Dawsley."

Unlike automated bot attacks, this actor (or group acting under this single identity) operates using high-touch, personalized grooming techniques. I've analyzed the "Merritt Dawsley" digital footprint and found significant anomalies suggesting this is a Synthetic Identity used for fee-advance fraud:

Credential Fabrication: The individual claims extensive background in "Blockchain Forensics" and seemingly verifiable past employment. However, a cross-reference with archived employee registries of the cited firms (e.g., major cybersecurity consultancies) yields zero matches. The LinkedIn profile appears to be "aged" using engagement pods but lacks genuine connection graphs within the infosec community.

The "Technical" Hook: "Merritt" approaches targets claiming to have traced their specific stolen funds to a "frozen mixer." He provides a PDF report as proof. Analyzing the metadata of these reports reveals they are template-generated (identical structural hash) and not derived from actual on-chain analysis.

Attack Vector: The endgame is always manual execution. Instead of a smart contract interaction, this individual persuades victims to grant "consultancy access" or transfer a "retainer fee" for legal processing.

If you are approached by this individual offering asset recovery services, treat the communication as a phishing attempt. The technical jargon used in his correspondence is syntactically correct but semantically meaningless in the context of actual blockchain immutability.

Has anyone else encountered this specific persona? I'm trying to determine if the profile photo is AI-generated (GANs) or stolen from a non-English speaking web.
by jwally | 2026-01-26 12:12:27+00:00
The API cost...ughhhhh

I set $10 on fire the other day as I was running through some tests.

Like old school arcade games "Please insert more ${money} to keep playing...". Local, smaller, specialized (unix philosophy?) seems like the way to go so you don't bk yourself having AGI distill pintrest recipes to just recipes.
by CherishRoby | 2026-01-26 12:12:29+00:00
Great question! I am using column headers as context signals. If a column is named 'Rate', 'Price', 'Percentage', or 'Count', I'm more lenient with constants in formulas referencing it.
For ambiguous cases like 'Total', I currently flag it and let the user decide—which isn't ideal. I've been considering a confidence score system where:

High confidence whitelist: 24, 60, 7, 365 (time conversions)
Context-dependent: numbers near column headers with semantic meaning
Always flag: arbitrary numbers like 1.2, 847, etc. unless they're in a 'Constants' or 'Assumptions' section

The hardest edge case is something like Revenue * 0.15 where 0.15 might be a legitimate tax rate OR a hardcoded assumption that should be in a named cell. Right now I flag it as medium priority.
How would you approach this?
by katzgrau | 2026-01-26 12:12:30+00:00
The role of cause and effect is unshakeable.

> If everyone would make the same choice, then free will doesn't exist. It's only one step away from what you said.

I didn't say anything about free will. "One step away" is where you went, not me.

If you believe free will and determinism are logically incompatible, that's your own theory to prove.

I'm simply saying that everyone would make the same choice given the exact same circumstances and starting conditions.

To believe anything otherwise is magical thinking, and basically implies a moral superiority to someone else.
by t-3 | 2026-01-26 12:12:34+00:00
If the war is indeed mischaracterized, then Israel sharing figures would provide an alternative source to the "Hamas-run Gaza Health Ministry" for those who haven't already decided who's correct or don't trust those numbers. If Israel doesn't care to provide any information, then they are tacitly agreeing that the "Hamas" numbers are correct. That's just common sense politics.
by anonymous908213 | 2026-01-26 12:12:42+00:00
Note that self-reporting productivity gains is a completely unreliable and unscientific metric. One study[1], small in scope but a noteworthy data point, found that over the course of the study that LLMs reduced productivity by ~20% but even after the fact the participants felt that on average their productivity had increased by ~20%. This study is surely not the end-all be-all and you could find ways to criticise it or say it doesn't apply or they were doing it wrong or whatever reason you think the developers should have had increased productivity, but the point is that people cannot accurately judge their own productivity by vibes alone.

[1] https://metr.org/blog/2025-07-10-early-2025-ai-experienced-o...
by greeniskool | 2026-01-26 12:12:53+00:00
Having a bit of a cultural shock at how English doesn't have a separate name for the "cruder" graffiti (such as tags) vs the more socially accepted street art. The former is typically called "pichação" [1] in Portuguese, and I was taught this distinction when learning about modern art movements back in elementary school.

[1] https://pt.wikipedia.org/wiki/Picha%C3%A7%C3%A3o - I recommend looking into a machine translated version of the Portuguese Wikipedia article, as the English Wikipedia article reads far more biased
by Rochus | 2026-01-26 12:13:09+00:00
So what we need is essentially a "libc virtualization".

But Musl is only available on Linux, isn't it? Cosmopolitan (https://github.com/jart/cosmopolitan) goes further and is available also on Mac and Windows, and it uses e.g. SIMD and other performance related improvements. Unfortunately, one has to cut through the marketing "magic" to find the main engineering value; stripping away the "polyglot" shell-script hacks and the "Actually Portable Executable" container (which are undoubtedly innovative), the core benefit proposition of Cosmopolitan is indeed a platform-agnostic, statically-linked C standard (plus some Posix) library that performs runtime system call translation, so to say "the Musl we have been waiting for".
by Schlagbohrer | 2026-01-26 12:13:29+00:00
Good advice in the last point about interviews. "While you're scheduling the seventh round, good hires are already accepting a job elsewhere." I gave up on a job I was lukewarm about when, after flying me there for an all day site visit and hours and hours of technical interviews, they then wanted me to do 3 days of video calls with various groups around the company! People i could have simply met for 15 minutes in person when I was there. In all the time this took I accepted a much better job closer to home.
by reacharavindh | 2026-01-26 12:13:34+00:00
I've been thinking about this very thing the last few days. "secretary in my Mac" to be specific. An ever running daemon that uses an LLM model for smarts, but pretty much do as many dumb things deterministically as possible.
1. Fetch my calendars(Fastmail, work Google Calendar, Couple's calendar at Cupla) and embellish it with routine tasks like pickup/drop kids, and give me a Today view like this https://zoneless.tools/difference/london-vs-new-york?cities=...

2. Access to my TODO list on Apple Notes and basically remind my ADHD brain that I ought to be doing something and not let it slip because it is uninteresting.

3. Have access to all models via API keys I configure and maintain a "research journal" of all the things I go to LLMs for - "research of bike that fits my needs" whatever and figure out if there needs to be a TODO about them and add if I say yes.

4. View my activity as a professional coach and nudge me into action "Hey you wanted to do this at work this year, but you haven't begun.. may be it is time you look at it Thursday at 3 PM?"

5. View my activity as a mental health coach and nudge me like "hey you're researching this, that and blah while X, Y and Z are pending. Want me to record the state of this research so you can get back to doing X, Y and Z?" or Just talk to me like a therapist would.

6. Be my spaghetti wall. When a new idea pops into my head, I send this secretary a message, and it ruminates over it like I would and matures that idea in a directory that I can review and obsess over later when there is time..

As you see, this is quite personal in nature, I dont want hosted LLMs to know me this deeply. It has to be a local model even if it is slow.
by willtemperley | 2026-01-26 12:13:37+00:00
I'm really surprised they don't attempt to make the Mac a more work-focused machine.

Try building a graphics editor in SwiftUI. This is not really possible in 2026 in SwiftUI. I build a zoomable pannable page setup was incredibly difficult but possible.

Then try adding WYSIWG text editing to that. I got halfway to building one using CoreText to render to Canvas which works but then there's this fight with their NSAttributedString which is opaque and horrible, making it impossible to store CMYK colours alongside the text runs. There's also no way to capture iPad keyboard input in SwiftUI.

In the end, I have to build things that fit within platform constraints if I want to use SwiftUI.

The fact that e.g. Canva and Figma bypass almost all their APIs and draw to canvas should be a wake-up call for them.

Also PDF generation is painful enough that I'm considering a Java based web-service for document export on macOS.
by skandinaff | 2026-01-26 12:14:48+00:00
True. Yet, somehow more and more cities install them blindly because efficiency. I remember when I moved to Odense Denmark in 2013 - they had LED street lights all over the place. I thought - this is the future compared to my uderdeveloped post soviet Latvia. And yet, I remeber when I moved back, streets at night looked so yellow because the city still relied on sodium lights. And my eyes felt much more comfortable. At the time I wrote it off to nostalgia or something, and here we are.
by dzogchen | 2026-01-26 12:14:49+00:00
Note that the demotiles style is not really comparable to a production basemap such as ones based on the popular OpenMapTiles schema. The article linked in the announcement has some more findings related to compression ratio.

Also note that lightweight encodings are built into the format, and different tiles can even be encoded in a completely different way. So you have to use heuristics to find the best combination of encodings and often you need to make a trade off between tile size and decoding performance. It is still early days for MLT, but all this means there are a lot of possibilities for optimization. In fact, AWS is again financing work on MLT this year, with a focus on optimization.

Lastly, when benchmarking tile size, it is good to look at actual usage patterns instead of size of the total tile set. Nobody is zooming into a random spot in the ocean, for example. ;-)
by Lwerewolf | 2026-01-26 12:14:54+00:00
FoundationDB's approach - look up their testing framework.

I've worked in a company that, for all intents and purposes, had the same thing - single thread & multi process everything (i.e. process per core), asserts in prod (like why tf would you not), absurdly detailed in-memory ring buffer binary logs & good tooling to access them plus normal logs (journalctl), telemetry, graphing, etc.

So basically - it's about making your software debuggable and resilient in the first place. These two kind of go hand-in-hand, and absolutely don't have to cost you performance. They might even add performance, actually :P
by mmsols | 2026-01-26 12:14:57+00:00
Key features:
- Dual-pane interface
- Vim-style navigation (hjkl, gg, G, /)
- Built-in terminal with path sync
- Git integration (status badges, stage/unstage)
- Remote connections (SFTP, FTP, S3, WebDAV, cloud drives)
- Archive browsing (ZIP, RAR, 7z as folders)
- Retro themes (Norton Commander blue + CRT effects)
by flohofwoe | 2026-01-26 12:15:10+00:00
Dynamic libraries make a lot of sense as operating system interface when they guarantee a stable API and ABI (see Windows for how to do that) - the other scenarios where DLLs make sense if for plugin systems. But that's pretty much it, for anything else static linking is superior because it doesn't present an optimization barrier (especially for dead code elimination).

No idea why the glibc can't provide API+ABI stability, but on Linux it always comes down to glibc related "DLL hell" problems (e.g. not being able to run an executable that was created on a more recent Linux system on an older Linux system even when the program doesn't access any new glibc entry points - the usually adviced solution is to link with an older glibc version, but that's also not trivial, unless you use the Zig toolchain).

TL;DR: It's not static vs dynamic linking, just glibc being a an exceptionally shitty solution as operating system interface.
by jacquesm | 2026-01-26 12:15:19+00:00
It will if you let it. The number of times the AI has come up with 'I can write you 'x', 'y' or 'z' in a heartbeat, just say the word' and I keep on having to steer it back to the track of being a repository of knowledge rather than an overeager very junior co-worker that can't help themselves to want to show off their skills.

It's very tiresome. Like an idiot/savant, they're an idiot most of the time and every 10th try you go 'oh, but that's neat and clever'.
by 7777777phil | 2026-01-26 12:15:20+00:00
If you look at the survey it's not only about productivity it's also about usage, model choice etc. But I agree with you self reported productivity gains is to be taken with a grain of salt. But then what else would you propose? The goal is to not only rely on benchmarks for model performance but develop some kind of TIOBE Index for LLMs.
by a_conservative | 2026-01-26 12:15:21+00:00
Note that you aren't providing evidence either :)

Providing evidence is tricky, because most evidence hints rather than proves, so it's very subject to confirmation bias and is easily dismissed by those who disagree.

There are large filter bubbles right now that make it hard to agree on basic facts. I don't think any of us really knows for sure what's organic and what's synthetic right now.
by expedition32 | 2026-01-26 12:15:24+00:00
There is a column in the newspaper that I read. They let a police officer talk about the most memorable event they have experienced in their work. A little girl in pajamas looking for her psychotic mother, someone putting themselves on fire, a best dad of the year driving his family into a canal...

They really deal with terrible stuff. And all that for 2500 eurodollar a month.
Sadly not the kind of job AI can take over.