MurphyA/hacker-news huggingface dataset:
by bbor | 2026-01-13 15:51:29+00:00
For anyone who isn’t aware/remembering, this is certainly made with the security of PyPi in mind, python’s main package repository.

NPM is the other major source of issues (congrats for now, `cargo`!), and TIL that NPM is A) a for-profit startup (??) and B) acquired by Microsoft (????). In that light, this gift seems even more important, as it may help ensure that relative funding differences going forward don’t make PyPi an outsized target!

(Also makes me wonder if they still have a Microsoft employee running the PSF… always thought that was odd.)

AFAIU the actual PSF development team is pretty small and focused on CPython (aka language internals), so I’m curious how $750,000/year changes that in the short term…

EDIT: there’s a link below with a ton more info. This gift augments existing gifts from Amazon, Google, Microsoft, and Citi, and they soft-commit to a cause:

Planned projects include creating new tools for automated proactive review of all packages uploaded to PyPI, improving on the current process of reactive-only review. We intend to create a new dataset of known malware that will allow us to design these novel tools, relying on capability analysis.
by maxfurman | 2026-01-13 15:51:36+00:00
Same! My dad worked in corporate HR and loved Dilbert (I guess it spoke to him), so we usually had a few of his books and/or a strip-a-day desk calendar around the house that I would read. I never considered it before, but maybe I'm the cynical software engineer I am today because of Scott Adams. The world is a funny place sometimes.
by icegreentea2 | 2026-01-13 15:51:51+00:00
To be clear, NASA has an entire field center dedicated to rocket testing (https://en.wikipedia.org/wiki/Stennis_Space_Center). This is where everything gets tested now. You may remember the "green run" tests of the SLS - those happened at Stennis.

Stennis didn't exist at the start of the space race or Apollo. Marshall is colocated on Redstone Arsenal, a legacy of parts of NASA being bootstrapped out of the Army ballistic missile program. Marshall had test stands because that era of NASA (aka von Braun) sought to colocated engineering, prototyping and test.

One challenge with continuing tests at Marshall is that... it's actually really close to population centers. Large engine tests would be ridiculously disruptive. There are comments in the Ars article noting that people living in Huntsville could hear the demolition work.
by shadowgovt | 2026-01-13 15:51:59+00:00
It's a pretty nice best-of-both-worlds arrangement. The type information is there, but the program still runs without it (unless one is doing something really fancy, since it does actually make a runtime construct that can be introspected; some ORMs use the static type data to figure out database-to-object bindings). So you can go without types for prototyping, and then when you're happy with your prototype you can let mypy beat you up until the types are sound. There is a small nonzero cost to using the types at runtime (since they do create metadata that doesn't get dropped like in most languages with a static compilation step, like C++ or TypeScript).

I can name an absolute handful of languages I've used that have that flexibility. Common LISP comes to mind. But in general you get one or the other option.
Show HN: 26x speedup on BitNet sparse ops with AVX-512 and 2-bit encoding
by HyperFoldUK | 2026-01-13 15:52:13+00:00
I've been optimizing ternary operations for BitNet 1.58b and found significant overhead in the current implementation.

I wrote a dependency-free C kernel (sparse-ternary-fma) using 2-bit encoding and AVX-512 instructions.

Benchmarks on Intel Xeon (N=4096):

Throughput (Dense): 2.38x faster (8.21 GFLOPS vs 3.45 AVX2)

Throughput (Sparse 80% zeros): 26.12x faster (23.25 GFLOPS vs 0.89 Scalar)

Memory: 4x denser (2-bit vs 8-bit standard)

This approach packs 4 trits per byte and leverages sparsity-aware FMA to skip zero-valued weights, which is critical for 1.58-bit quantization efficiency.

PR is pending on the Microsoft BitNet repo. Code is open source here:https://github.com/microsoft/BitNet/pull/365
by RansomStark | 2026-01-13 15:52:15+00:00
I guess it depends on what you mean by English.
England is a country, but you can't have an English passport, you can only get a UK passport.
so, English is a kinda-sorta a non-nationality, but it is very much an ethnic group.

I don't think anyone is claiming that Rishi Sunak isn't a UK citizen, but he certainly isn't a member of the English ethnic group, or any of the Celtic ethnic groups that also make up the UK.
by amluto | 2026-01-13 15:52:27+00:00
Because the rest of the system is not necessarily designed to tolerate high frequency content gracefully. Any nonlinearities can easily cause that high frequency junk to turn back into audible junk.

This is like the issues xiphmont talks about with trying to reproduce sound above 20kHz, but worse, as this would be (trying to) play back high energy signals that weren’t even present in the original recording.
by JCattheATM | 2026-01-13 15:52:46+00:00
The problem is most Brits, at least on HN, seem to deny what is happening and/or support it. People being arrested for holding up blank signs at Charles' coronation was ridiculous and nothing like it has happened in the US, but anytime that's brought up they pivot to mass shootings in the US or some other whataboutism.
by drnick1 | 2026-01-13 15:53:13+00:00
> I'd definitely love to see them take some steps, but at the points where a minor increase in privacy leads to a much worse UX for average people

Disabling Javascript or even just third party scripts does lead to major breakage, but reporting spoofed values for identifiers like Tor does not. The Arkenfox user.js does all of this and more, but these options are not enabled by default. This shows that Firefox does not care much about privacy in practice.

The only "breakage" that I have encountered with such a hardened configuration is related to the spoofing of the time zone. But the fundamental issue is that Javascript/browsers should have not been designed to allow websites to extract this kind of personal information in the first place. But even that is not enough and users are still fingerprintable. In an ideal world, the only thing a website should see is the originating IP and nothing else.

If anything, Brave has done more to harden Chromium than Mozilla has with Firefox, even though it comes with its own set of problems (scammy crypto integrations, AI, VPN and other stuff).
by embedding-shape | 2026-01-13 15:53:14+00:00
> Most people are using MyPy or an alternative typechecker, and the community frowns on those who aren’t.

That's not like a widespread/by-default/de-facto standard across the ecosystem, by a wide margin. Browse popular/trending Python repositories and GitHub sometime and I guess you can see.

Most of the AI stuff released is still basically using conda or pip for dependencies, more times than not, they don't even share/say what Python version they used. It's basically still the wild west out there.

Never had anyone "frown" towards me for not using MyPy or any typechecker either, although I get plenty of that from TS fans when I refuse to adopt TS.
by miroljub | 2026-01-13 15:53:33+00:00
Most of the murders (homicides) in the USA are committed using illegal weapons. Banning legal weapons wouldn't reduce crime, it would just make it harder for victims to defend themselves.

Besides, USA is not a good example. According to Wikipedia [1], high murder rate statistics in the USA are skewed due to the overrepresentation of one specific part of the population, which is not that common in comparable countries. If that population were to be removed from the statistics, the murder rate in the USA would drop significantly.

> According to the FBI 2019 Uniform Crime Report, African-Americans accounted for 55.9% of all homicide offenders in 2019, with whites 41.1%, and "Other" 3% in cases where the race was known. Including homicide offenders where the race was unknown, African-Americans accounted for 39.6% of all homicide offenders in 2019, with whites 29.1%, "Other" 2.1%, and "Unknown" 29.3%[48]

[1] https://en.wikipedia.org/wiki/Race_and_crime_in_the_United_S...
by zozbot234 | 2026-01-13 15:53:53+00:00
A Stoic would say that negative emotions have root causes in the misconceptions you hold about how the world works, and what you can and cannot affect about it. If you don't proactively address those root causes (which doesn't require "expressing" the emotion, but does require noticing and judging it without reflexive acceptance) the negativity will in fact "keep flowing" and your short-term disregard of it will be less and less effective.

It's not a good "habit" to disregard negative emotions without also examining them.
by 1vuio0pswjnm7 | 2026-01-13 15:54:06+00:00
https://www.cnet.com/tech/services-and-software/apple-to-rep...

Google pays 20 billion to Apple annually for search traffic

Apple allegedly pays Google about 1 billion per year for Gemini

Perhaps Gemini sends more search traffic to Google

The search traffic and data collection is worth far more than Gemini
by afavour | 2026-01-13 15:54:14+00:00
> In a 2006 blog post, Adams asked if official figures of the number of deaths in the Holocaust were based on methodologically sound research. In 2023, Adams suggested the 2017 Unite the Right rally was "an American intel op against Trump."

> After a 2022 mass shooting, Adams opined that society leaves parents of troubled teenage boys with only two options: to either watch people die or murder their own son

https://en.wikipedia.org/wiki/Scott_Adams

Maybe “insanity” is strong but I do not think anyone who holds beliefs like those is thinking straight. Toying with Holocaust denial is not simply “having different opinions to you”.
by alemanek | 2026-01-13 15:54:14+00:00
They kind of spoke to it. Rebasing to bring in changes from master to a feature branch which is a bit longer running keeps all your changes together.

All the commits for your feature get popped on top the commits you brought in from main. When you are putting together your PR you can more easily squash your commits together and fix up your commit history before putting it out for review.

It is a preference thing for sure but I fall into the atomic, self contained, commits camp and rebase workflows make that much cleaner in my opinion. I have worked with both on large teams and I like rebase more but each have their own tradeoffs
by quietsegfault | 2026-01-13 15:54:15+00:00
This is not about disliking “different opinions” or refusing to hear opposing views. It is about a documented pattern of statements in which Adams moved from commentary into explicit endorsement of collective punishment, racialized generalizations, and norm breaking prescriptions that reject basic liberal principles.

Being “aware of both sides” means engaging evidence and counterarguments in good faith. Repeatedly dismissing data and framing entire groups as inherently hostile is not that. Calling this out is not echo chamber behavior, it is a substantive judgment based on what was actually said, not on ideological disagreement.
by slfnflctd | 2026-01-13 15:54:18+00:00
> volunteer non profit news organization [...] skilled journalists

This could maybe be done with retirees or those who are mostly financially independent, as well as those who want to help run the nonprofit.

The problem is that in the current climate, it is harder both to retire and to become financially independent.

If you want the labor of skilled journalists beyond a trickle of content from the ivory tower type, you either need to set up an intentional community or simply pay people enough to live on. I don't see any clear shortcuts. Quality output requires sufficient energy inputs.
by darrenf | 2026-01-13 15:54:28+00:00
> What data centers? Does Apple even have data centers?

Apple absolutely has data centres. Where do you think Apple TV, Apple Music, iCloud, Maps, etc compute happens?

Here's a press release straight from the horse's mouth about one in Denmark, in late 2020: https://www.apple.com/uk/newsroom/2020/09/apple-expands-rene...

> Can people purchase compute on Apple's data centers?

Not to my knowledge, but that's not saying much.
by paranoidrobot | 2026-01-13 15:54:33+00:00
I've run into this a bunch too.

Just this week I wanted Claude Code to plan changes in a sub directory of a very large repo. I told it to ignore outside directories and focus on this dir.

It then asked for permission to run tree on the parent dir. Me: No. Ignore the parent dir. Just use this dir.

So it then launches parallel discovery tasks which need individual permission approval to run - not too unusual, as I am approving each I notice it sneak in grep and ls for the parent dir amongst others. I keep denying it with "No" and it gets more creative with what tool/pathing it's trying to read from the parent dir.

I end up having to cancel the plan task and try again with even more firm instructions about not trying to read from the parent. That mostly worked the subsequent plan it only tried the once.
by btown | 2026-01-13 15:54:44+00:00
As someone who's loved Logic Pro since the days before Apple bought Emagic, this is amazing that it will be accessible to a broader audience.

There are many discussions e.g. https://gearspace.com/board/music-computers/1433515-why-does... about the reasons for its popularity, but one stands out to me - its event data model.

There are far too many tools out there (from FL Studio on one end, to MuseScore on the other) that present piano-roll-based rapid prototyping and traditional western score notation as diametric opposites. From day 1, Logic challenged itself "what if we can use the same event-based data model to render both."

None of this complexity is hidden - you can edit the raw event stream directly. If you're a developer familiar with, say, React, it makes music creation quite intuitive - everything from visual to audio output is a function of a transparently formatted data store.

And while that has its challenges, and some of the UX innovations of e.g. MuseScore have been slower to arrive in Logic, because of this "dual life" it's unmatched as a pedogogical tool, and a professional creative tool as well.
by simonw | 2026-01-13 15:54:45+00:00
If you can draw a cow and an ork on top of an Anthropic logo with five minutes in Inkscape in a way that clearly captures this particular joke then my hat is off to you.

I'm all in on LLMs for code and data extraction.

I never use them to write text for my own comments on forums so social media or my various personal blogs - those represent my own opinions and need to be in my own words.

I've recently started using them for some pieces of code documentation where there is little value to having a perspective or point of view.

My use of image generation models is exclusively for jokes, and this was a really good joke.
by bbor | 2026-01-13 15:54:49+00:00
And they come in a variety of bindingness. I didn’t notice any details in this link which makes me think this is mostly a handshake deal, but it wouldn’t be at all unusual for there to be some auditing mechanisms on a quarterly/yearly cycle.

For example, Wikimedia just recently claimed that they can’t chase some political project that critics wanted them to because most of their funds are earmarked-for/invested-in specific projects. So it does happen with US-based tech non-profits to at least some extent.
by deflator | 2026-01-13 15:55:03+00:00
I think that a lot of us on here can give credit to Scott Adams for helping develop their cynicism, for better or worse.

He was a role model to me for helping me to make sense of the corporate world and its denizens. This might not sound like a compliment, but it is. He was my Mr. Miyagi for mental resilience by providing good arguments for most people not being evil, despite how it might seem.
by Levitz | 2026-01-13 15:55:06+00:00
For all that it's worth, from the outside it looks to have undergone a real, notable improvement. The feeling is exacerbated by the dumpster fire at bluesky insisting that it was the worst thing ever and because after the fact, about every default subreddit (which already were in a bad state) are now terminal with politics brainrot.
by jquery | 2026-01-13 15:55:22+00:00
Actually it’s more accurate to say Scott was always a far right troll and provocateur, but at some point he fell down a racist rabbit-hole. The book “The Trouble with Dilbert: How Corporate Culture Gets the Last Laugh” shows how Scott Adams never cared about the plight of workers in the first place, using his own words. It was way ahead of its time, as the angry reviews from 1998 and 2000, back in Dilbert’s heyday, demonstrate.

I say this as someone who used to really enjoy Dilbert, but looking back with a critical eye, it’s easy to see an artist who deliberately avoids bringing up topics that might actually do something to improve corporate culture.
by Imustaskforhelp | 2026-01-13 15:55:37+00:00
I think it might be offtopic but is there any way that there are minimalist browsers which can work on let's say vps's but I wouldn't need to host a complete vnc server or set up with the debugging port magic of puppeteer or chrome

I think browsh which is a text based web browser is the most recommended for something like this but browsh doesnt map things 1 to 1 and there are still some issues. I wish if there was a simple browsh alternative which could use new image protocols in terminal (I think kitty protocol or other comes to my mind) to basically act as a complete browser.

Does anyone know of anything like this? I sometimes like the idea of just leaving a tab completely open 24x7 on a vps, I feel like there can be interesting data which can happen because of it. Thoughts?
by nyrikki | 2026-01-13 15:56:01+00:00
Note that while containers can be leveraged to run processes at lower privilege levels, they are not secure by default, and actually run at elevated privileges compared to normal processes.

Make sure the agent cannot launch containers and that you are switching users and dropping privileges.

On a Mac you are running a VM machine that helps, but on Linux it is the user that is responsible for constraints, and by default it is trivial to bypass.

Containers have been fairly successful for security because the most popular images have been leveraging traditional co-hosting methods, like nginx dropping root etc…

By themselves without actively doing the same they are not a security feature.

While there are some reactive defaults, Docker places the responsibility for dropping privileges on the user and image. Just launching a container is security through obscurity.

It can be a powerful tool to improve security posture, but don’t expect it by default.
by claaams | 2026-01-13 15:56:01+00:00
What did he mean when he said this well reasoned opinion?

“When a young male (let’s say 14 to 19) is a danger to himself and others, society gives the supporting family two options: 1. Watch people die. 2. Kill your own son. Those are your only options. I chose #1 and watched my stepson die. I was relieved he took no one else with him.”

“If you think there is a third choice, in which your wisdom and tough love, along with government services, ‘fixes’ that broken young man, you are living in a delusion. There are no other options. You have to either murder your own son or watch him die and maybe kill others.”

That’s surely from the calm rational mind of someone not filled with resentment and hate right?
Show HN: Term.stream – Stream your terminal to any device via URL
by zero_dev | 2026-01-13 15:56:05+00:00
I built this because I kept running Claude Code, going to the gym,
and not being able to see if it finished or tell it what to do next.

term.stream lets you run `tstream` and get a shareable URL instantly.
Open it on your phone, another laptop, anywhere. View-only by default,
control access with a token.

No SSH keys, no tmux, no port forwarding. Just a link.

Built with Rust (daemon + relay) and a simple web client.
by room271 | 2026-01-13 15:56:32+00:00
As a Brit, I find it very hard to believe that the majority of comments in this thread are not either written out of ignorance or are bots.

The article is from an anarchist organisation and sensationalist. 'Precrime' in the sense described is performed routinely by all intelligence agencies and police networks in the West.

Criticisms from across the pond reflect a spectacular lack of perspective. The UK is far more free than the US - a country with a fascist leader, ICE thugs who go about masked with guns and shoot to kill US citizens apparently with the full endorsement of the US President, a weaponised justice system that can target the chairman of the federal bank and strip a military Senator of his pension and rank, and levels of inequality and centralised wealth and political funding that undermine democracy.
by close04 | 2026-01-13 15:57:11+00:00
> I never get these discussions. It's only ever online that I see complaints. everyone else seems fine with it

That's a skewed conclusion you're drawing. Are you really surprised that people aren't willing to risk escalating the situation on a plane, arguing with what's likely the very inconsiderate person in front of them? Most people have an aversion to conflict. It doesn't mean "they're fine with it".

I've bumped into people and they said "sorry", do you think they wanted me to bump into them, liked it, and actually believed it was their mistake? No, I just tower at close to 2m so they didn't want to escalate the situation.

P.S. I always look at who sits behind me, if they're "space constrained" or not, and almost always ask if I can recline. Sometimes I don't bother, clearly the person will suffer. Sometimes they said "I'd rather not, thank you". Many times they said "fine". I used to fly a lot and my experience was certainly that "everyone is fine". I was never fine even if I didn't start arguing. So how would you have known?
by fao_ | 2026-01-13 15:57:20+00:00
> Scott had well reasoned opinions and was consistently aware of both sides of issues and news.

[citation needed]

Here are my own citations:

https://rationalwiki.org/wiki/Scott_Adams

"In a 2006 blog post (which has since been deleted), Adams flirted with Holocaust denialism, questioning whether estimates of the number of people killed during the Holocaust are reliable [...] If he actually wanted to know where the figures come from, he could have looked on Wikipedia or used his Internet skills to Google it or even asked an expert as he once recommended"

"Just 3 hours after the 2019 Gilroy Garlic festival mass shooting, Adams attempted to profit off of it by trying to sign up witnesses for a cryptocurrency-based app that he co-founded called Whenhub.[58][59][60]"

"After being yanked from newspapers due to racism, Adams moved his operations to a subscription service on Locals. While Adams continued to create a "spicier" version of Dilbert "reborn" on that site, Adams' focus shifted towards "political content". His Locals subscription included several livestreams with "lots of politics" as well as a comic called Robots Reading News, with a little bit of alleged self-help media content as well.[73] His Twitter feed also increasingly focused on angry MAGA politics.[74]"

"Adams continued to believe Donald Trump's Big Lie and maintained that the 2020 U.S. presidential election was rigged. In March 2024, when Adams falsely suggested that US "election systems are not fully auditable and lots of stuff goes 'missing' the day after the election", the Republican Recorder of Maricopa County Stephen Richer explained that US elections actually were fully auditable, and gave some information on the actual process officials use for auditing elections.[82]"