MurphyA/hacker-news huggingface dataset:
by zozbot234 | 2026-01-22 12:53:09+00:00
You can use Xephyr or Xnest to sandbox an untrusted or insecure application within its own X11 instance. This gives you the exact same kind of security property that Wayland happens to enforce out of the box for its clients, except that it need not apply to basic desktop components such as the window manager or the desktop panel. You don't even need Xlibre or anything, this stuff has been around for ages. It's not rocket surgery!
by ben_w | 2026-01-22 12:53:41+00:00
> Software is never "finished" the way a building is finished.

On the contrary, it absolutely can be, in both directions.

Software can absolutely be "feature complete", and in the case of many products it would have been an improvement to say "we're done now" and switch from developing new features to maintenance-only mode, dealing only with API changes and new laws.

Some examples of where it should be "done" by some point include smart TVs and smart lightbulbs. I'm also old enough to remember the era of games where patches were rare and small, unlike the current experience of having to wait for Steam to install updates almost every day, and only then will allow me to see if the game I want to play and which worked yesterday now has a mandatory update that I also have to wait for (which is less often but still often enough to be annoying).

Even with MacOS, while I absolutely do appreciate all the behind the scenes stuff regarding security and so on, the last time I appreciated what they did with the UI in an update, the version branding scheme was still to name releases after cats.

Even as an iOS developer, although I can see what they're trying to do with SwiftUI, I find it worse than UIKit in basically every regard because the "magic" keeps not working and the "problem" it tried to solve was never (for me) a problem; with concurrency, they went from GCD to Combine which IMO was a step back, before going to async/await.

"Too many features" is also a problem for the developers, as it leads to them duplicating work. For example, the background sounds feature on my phone and the one on my HomePod each has its own list of sounds, they're not just two interfaces to the same underlying app even though the HomePod's OS is a fork of tvOS which is a fork of iOS.

(The other way around, the home I grew up in is now about twice the size it was when my parents bought it around 1970, judging from the Google areal view).
by mexicocitinluez | 2026-01-22 12:54:03+00:00
No, they aren't.

Go look at the bills coming before congress and tell me how many are voted purely along party lines? Then look at the bills themselves.

And the vast majority of the party is actually working towards real change. And guess what's happening to those who don't (the Schumers and Pelosis of the party)? They have a 5% approval rating and have to CONSTANTLY deal with people from their own party telling them to step down.
by moralestapia | 2026-01-22 12:54:33+00:00
Totally!

There's this one guy that used to be a regular of tech events where I live. He's building some sort of crappy luma clone.

Anyway, one day out of nowhere he posts on LinkedIn something like "to all girls, if you use my app at conferences we wouldn't have to stare at your breasts when looking at your name tags". What the ...

I'm not a girl and even I was creeped out by that.
by Levitz | 2026-01-22 12:54:43+00:00
I mean it's not in caps, but it's literally the first line in the dialog after the header:

https://code.visualstudio.com/docs/editing/workspaces/worksp...

I'm big on user first, if that dialog had sirens blaring, a gif and ten arrows pointing that "THIS MAY EXECUTE CODE" and people still didn't get the idea, I'd say it needs fixing. It can't be said that they didn't try or that they hid it though.
by Cthulhu_ | 2026-01-22 12:54:46+00:00
Or why try to shoot them down when you can also go to the command center and turn them off? Or do a targeted strike on said command center. The sattelites are plentiful and redundant, but the network will collapse very quickly when they're no longer controlled from the surface.

In fact, if SpaceX can no longer do any launches due to whatever reason, Starlink will no longer be feasible after a few year - if I'm reading it correctly, the sattelites have a lifetime of only 5 years, meaning they will have to continually renew them at a rate of 2000 new sattelites a year.
by eptcyka | 2026-01-22 12:55:03+00:00
Ah, so you resolve domains before to apply the routes to the profile, I see. As per the spec, network extensions are not allowed to reroute traffic outside the tunnel, destinations set in the tunnel network settings must be routed inside the tunnel. This means that users have to know their domains upfront, the app cannot do this dynamically, if only to comply with apple rules.
by jb1991 | 2026-01-22 12:55:05+00:00
It sounds funny, but it's not. I once issued a bug to them that didn't have enough information about how to reproduce... and I was lambasted on Reddit and eventually just deleted my account there it was so terrifying. Some dev teams do not mess around. In fact I've shied off most social media since and no longer issue bug reports to any company, I was scarred deep over the treatment.
by notachatbot123 | 2026-01-22 12:55:16+00:00
I look at the page and leave without any clue as to what it actually does. Agents and AI are mentioned so I assume it might just be incoherent slop?

The person behind this boasts on Twitter, that they fired all their remote developers and used AI instead.

Judging by tweets, this project is 2-3 years in the making.

> Lix is a universal version control system that can diff any file format (.xlsx, .pdf, .docx, etc).

> Unlike Git's line-based diffs, Lix understands file structure. Lix sees price: 10 → 12 or cell B4: pending → shipped, not "line 4 changed" or "binary files differ".

How? I have a custom binary file format, how would Lix be able to interpret this?

> Lix adds a version control system on top of SQL databases that let's you query virtual tables like file, file_history, etc. via plain SQL. These table's are version controlled.

What does SQL have to do with everything?
by lemontheme | 2026-01-22 12:55:47+00:00
Few games have captured my imagination like CoQ. Only, I wish it wasn’t so punishing. Death lurks around every corner. Even in roleplay mode (with permadeath disabled), you can lose hours of progress if you die between villages.

I understand the appeal. It makes the stakes real. You learn to run away rather than fight. But while it’s fun to laugh at all the ways you’ve died, if you’re a perpetual noob like me, it’s also frustrating. Survival seems to depend on keeping the wiki at hand. I contracted ‘glotrot’, for instance. Didn’t understand how or what I could have done to avoid or how to get rid of it. It was all there in the wiki. Maybe I could have soldiered on until I’d found an in-game book with the right info. Maybe I could have used that info in my next run. But with runs taking tens to hundreds of hours, that’s a big investment!

Still an incredible game though. I think about it more than any game I’ve ever played. The Steam Deck controls are also surprisingly effective for a kbd+mouse game!
by mexicocitinluez | 2026-01-22 12:55:53+00:00
> I think it's actually because of the gun control crap that Dems push.

Anything specific? Because from where I sit, the Dems aren't anywhere near as strict as they should be wrt to gun control.

Or are you just believing the stuff you're hearing from conservative media? Are you really of the belief that "farmers" need assault rifles? What about bump stocks?

How many school shooting have we had? What legislation came from those? Can you even name any?
by Terretta | 2026-01-22 12:57:34+00:00
Some feedback about the primary use case.

Your Lix doc (LLM written but with typos?) is sort of weird, handwaving how Lix does version control over, say, Excel, to say it's about working with SQL databases:

How does Lix work?

Lix adds a version control system on top of SQL databases that let's you query virtual tables like file, file_history, etc. via plain SQL. These table's are version controlled.

Then it gets weirder:

Why this matters:

Lix doesn't reinvent databases — durability, ACID, and corruption recovery are handled by battle-tested SQL databases.

This seems like a left turn from the value prop and why the value prop matters?

A firm-wide audit trail of changes to typically opaque file types (M365 files in particular) could be tremendously valuable -- and additive -- compared to the versioning that's baked into the file bundles. The version control is already embedded by the app, what adds value is reporting on or managing that from outside the app.

As for how it works, both in the docs and in the comment I'm replying to, it's unclear how any of this interacts with the native version control embedded in M365 apps or why this tool can be trusted as effective at tracking M365 content changes.
by TheDong | 2026-01-22 12:58:56+00:00
I've read their reports before. When there's not enough information to reproduce, they do a good job of asking for more information first, and I've never seen a reasonable good-faith report elicit anything overt.

If you failed to give them proper reproduction information when asked, then yeah, you were wasting their time and they should rightfully close your issue.

I've never seen anyone on the curl team undeservedly "lambast" someone, and for a project that has a quite good reputation, I think the burden of proof is on you. Can you link to these supposedly terrifying comments?
by ben_w | 2026-01-22 12:59:06+00:00
> The government has no mandate to benefit them over it's own citizens beyond the obvious (foreign aid, disaster relief, etc) though.

Yes, absolutely, I'm just pushing back there against "basically totally control them thru deportation threats should they get to uppity on Freedom Land's supply"; this was, previously, a mutually beneficial relationship despite being… I was about to write "second class citizen", but no, less than citizen even then.

That said, current regime clearly regards foreign aid, disaster relief as not worth supplying, they either don't understand the soft-power benefits to the USA or don't care.
by soegaard | 2026-01-22 12:59:07+00:00
Yes. I am following the Scheme tradition of representing immediate values as tagged pointers. And (ref i31) is the obvious choice when using WebAssembly.
I am happy you and the team added GC to WebAssembly.

Details on the representation.

https://github.com/soegaard/webracket/blob/main/compiler.rkt...

I am more or less only using the linear memory for the JavaScript FFI.
FASL-encoded values are passed back and forth to JavaScript.
by windowpains | 2026-01-22 12:59:12+00:00
This is a lot of it. Urban liberals see rural working class as backward and racist and uncultured. Just having a non-coastal accent (eg southerners) is treated as a marker of low character in our media. I recall how GW Bush’s accent was treated, as do many rural voters. Look at the discussion here, it’s about “those people” being too dumb to vote for their own interests. Unsurprisingly, people resent that.
by marcyb5st | 2026-01-22 12:59:12+00:00
My take is that if we are still scrambling to find something objectively useful (as recognized by the median person) then we really are in AI bubble territory.

When non techie friends/family bring up AI there are two major topics: 1) the amount of slop is off the charts and 2) said slop is getting harder to recognize which is scary. Sometimes they mention a bit of help in daily tasks at work, but nothing major.
by less_less | 2026-01-22 13:00:25+00:00
I'm not defending "you shouldn't ever need to snipe, just bid your max price" as a hard principle, just trying to explain where the idea comes from. Sniping can be strategic for lots of reasons: you don't have to commit to a bid until the last second (in case you find a similar item for cheaper elsewhere), you deny other people information, you might avoid anxiety from wondering whether your bid will win, etc.

That said, the max price is supposed to be a price where you are not especially happy to get the item at that price, but not really sad either, a price where you would say "well, I hoped for better but I guess that's a fair deal". That's not realistically pinned down to the cent. But if you set a max price at $5000 and would be happy to get the item at $5000.02 (for some reason other than satisfaction from sniping), then you set your max price wrong, or at least differently from how economists expect you to set it.
by vladms | 2026-01-22 13:00:48+00:00
> the default expectation that authors will be promptly responding to new GitHub issues, bug reports and provide patches for free is insane.

I think there are many insane expectations out there, open source or not, so I don't personally see it that linked with the idea/ideal of open source.

> This is software support, it is a job, it should be paid.

Anything can be paid, nobody says otherwise. Some people prefer nobody pays for their source code (open source). Other people do support for free. And so on.

> The currently default model of having ... has nothing to do with open source and is not sustainable.

There were always arguments why open source will not be sustainable, many having some truth in them. But the current issue can be probably solved with some push-back on the speed of things or how attribution works. Something similar used to happen on some forums: you can't post a new thread for one month if you did not reply at least once without getting down-voted. For the current problem : if contributions are anonymous for the first 3 years of you contributing (if you are not banned) and your name becomes public only after, then all this "noise" for "advertisement" will die. Doubt this will discourage any well intentioned contributor.
by klez | 2026-01-22 13:01:37+00:00
> I doubt it is something that the founding fathers of Free Software/Open Source had in mind.

Free Software sure, that wasn't the point.

Open Source, that was exactly the point. Eric S Raymond, one of the original promoters of the concept of Open Source coined Linus' Law:

Given enough eyeballs, all bugs are shallow

Which definitely points in the direction of receiving bug reports and patches from users of the application. He was also a proponent of the Bazaar model, where software is developed in public, as opposed to the Cathedral model where software is only released in milestones (he used GCC and Emacs as examples, which reinforces the part of your statement about the Free Software movement in particular).
by Esophagus4 | 2026-01-22 13:01:54+00:00
> curiosity is a superpower

I like this. I’ll take it a step further:

curiosity plus follow-through is a superpower. Lots of people I know are curious… they just never really follow through on it, so they end up average, wasting that superpower. They’re curious in their head, but it stays in their head.

I’m thinking about curiosity in a work sense (“could I build a better widget?”) and in a personal interest sense (“I wonder if taking a dance class / volunteering at a soup kitchen would be fulfilling”).

I’ve learned that the people who tend to excel are the ones who follow that curiosity to completion for something.
by koliber | 2026-01-22 13:02:29+00:00
I've seen an interesting behavior in India. If I ask someone on the street for directions, they will always give me an answer, even if they don't know. If they don't know, they'll make something up.

This was strange. I asked a lot of Indian people about it and they said that it has to do with "saving face". Saying "I don't know" is a disgraceful thing. So if someone does not know the answer, they make something up instead.

Have you seen this?

This behavior appears in software projects as well. It's difficult to work like this.
by laurentiurad | 2026-01-22 13:02:32+00:00
It's like any other muscle, if you don't exercise it, you will lose it.

It's important that when you solve problems by writing code, you go through all the use cases of your solution. In my experience, just reading the code given by someone else (either a human or machine) is not enough and you end up evaluating perhaps the main use cases and the style. Most of the times you will find gaps while writing the code yourself.
by kasey_junk | 2026-01-22 13:03:12+00:00
The USDA where I pulled that stat defines it as farms that have less than 1M in income (gross) per year. A farm that makes that much is going to only support at most 1 full time farmer. The further subdivide farms under 350k which clearly falls into some terrible definition of hobby.

Which tracks with my experience. I don’t know any family farmers where farming is their only, or even primary, occupation.
by tony-vlcek | 2026-01-22 13:03:26+00:00
Reminds me of an interview with Kyle Fish on 80k hours [1], where he talks about his research and how when models talk to each other:

> [...] something consistently strange: the models immediately begin discussing their own consciousness before spiraling into increasingly euphoric philosophical dialogue that ends in apparent meditative bliss.

Keen to see if that happens here.

[1]: https://80000hours.org/podcast/episodes/kyle-fish-ai-welfare...
by throw0101a | 2026-01-22 13:03:39+00:00
> Is it a bad thing? People's life choices are their own.

How much of a choice is it that they made willing? The number has doubled over the last few decades:

* https://www.self.inc/blog/adults-living-alone

* https://thesocietypages.org/graphicsociology/tag/living-alon...

There are health (and happiness) consequences to not being connected to other people:

* https://archive.is/https://www.theatlantic.com/ideas/archive...

* https://en.wikipedia.org/wiki/Loneliness_epidemic
by TheDong | 2026-01-22 13:03:51+00:00
Not necessarily. Reviewing an issue report is already enough time. Reviewing a patch is even more developer time.

The problem they had before was a financial incentive to sending reports, leading to crap reports that wasted time to review. Incentivizing sending reports + patches has the same failure mode, but they now have to waste even more time to review the larger quantity of input.

Anyway, for most cases I'd bet that Daniel can produce and get reviewed a correct patch for a given security bug quicker than the curl team can review a third-party patch for the same, especially if it's "correct, but ai-written".
Show HN: TeslaTV – Watch YouTube, Live TV and Streaming in Tesla's Browser
by tesladrivewatch | 2026-01-22 13:04:07+00:00
Hi HN,

I’ve built TeslaTV (https://teslatv.net), a web-based entertainment platform designed specifically for Tesla’s in-car browser.

The goal is to make media consumption inside the car simpler and more enjoyable, especially while parked or charging.

Features:
- Optimized UI for Tesla’s browser
- Easy access to YouTube and other video platforms
- Live TV / IPTV support
- No app installation required (browser-only)

This is an independent, third-party project (not affiliated with Tesla).
I’m actively improving the UX based on user feedback.

I’d really appreciate any feedback, ideas, or criticism from the community.
Thanks!
by warpspin | 2026-01-22 13:04:29+00:00
MariaDB has system-versioned tables, too, albeit a bit worse than MS SQL as you cannot configure how to store the history, so they're basically hidden away in the same table or some partition: https://mariadb.com/docs/server/reference/sql-structure/temp...

This has, at least with current MariaDB versions, the annoying property that you really cannot ever again modify the history without rewriting the whole table, which becomes a major pain in the ass if you ever need schema changes and history items block those.

Maria still has to find some proper balance here between change safety and developer experience.
by jasode | 2026-01-22 13:04:54+00:00
reply to multiple comments :

mjdv : > it wasn't clear to me that just opening and trusting a directory

andy_ppp : >obviously I wasn’t explicit enough in explaining I’m talking about code execution simply by opening a directory.

Understandably, there's a disconnect in the mental model of what "opening a folder" can mean in VSCode.

In 99% of other software, folders and directories are purely navigation and/or organization and then you must go the extra step of clicking on a particular file (e.g. ".exe", ".py", ".sh") to do something dangerous.

Furthermore, in classic Visual Studio, solutions+projects are files such as ".sln" and ".vcsproj" or a "CMakeLists.txt" file.

In contrast, VSCode projects can be the folders. Folders are not just purely navigation. So "VSCode opening a folder" can act like "MS Excel opening a .xlsm file" that might have a (dangerous) macro in it. Inside the VSCode folder may have a "tasks.json" with dangerous commands in it.

VSCode uses "folders" instead of a top-level "file" as a semantic unit because it's more flexible for multiple languages.

To re-emphasize, Windows File Explorer or macOS Finder "opening a folder" do not run "tasks.json" so it is not the same behavior as VSCode opening a folder.
by mort96 | 2026-01-22 13:05:33+00:00
Regarding the last part: it's simple, $1.01 is less than $100

This process doesn't work endlessly. You can't just add $.01 a billion times and I'd still pay it. But it works once or twice.

Shops set prices like $499.99 due to funny psychological effects: $499.99 is still a price "in the 400s" while $500 is "in the 500s". Nobody sits down and thinks logically about it and concludes that no, the $.01 difference between $499.99 and $500.00 crosses the line. But people see $499.99 and the brain initially goes "oh, it's only 400-something".
by trelane | 2026-01-22 13:05:41+00:00
Emacs is a full IDE, not just a quick one-off editor. Its power comes from having everything scriptable from the ground up. Contrast this with the modern Extension concept, where there is a hard line between the editor's code and any changes you might want to make to its behavior.

I think vim is probably similar, but I've not gotten into it that much.
by nemomarx | 2026-01-22 13:06:10+00:00
You've got it backwards - foreign aid using US grown crops provides increased very stable demand. Take any excess grains made in a given year and ship them to another country, the farmers get paid well for it so they keep their productive capacity high, and the marginal cost of getting it to a charity overseas is low anyway. This means there's always enough grain to feed our citizens.
by TwoNineA | 2026-01-22 13:06:39+00:00
I really hate condascending and arrogant stuff like "Generally speaking people are too stupid to use AI properly at least for awhile". There are plenty of tech illiterate people that are far from being "stupid" and they might not care about or like AI. They just need to send emails to family, share photos and videos and have a video call from time to time. For them, AI is worthless.

But they aren't stupid. You sound like a tech bro.
by password54321 | 2026-01-22 13:06:51+00:00
This isn't really a tasteful collection. It is just a bunch of popular books, all of which that I have read being about minimalism.

If that's what you want you can just use Apple as a case study because that's what you end up getting if you want "modern" and minimal. Even just drop the CSS file from source into an LLM and go through how it is implemented.
by Kbelicius | 2026-01-22 13:07:32+00:00
> This statement feels like a farmer making a case for using their hands to tend the land instead of a tractor because it produces too many crops. Modern farming requires you to have an ecosystem of supporting tools to handle the scale and you need to learn new skills like being a diesel mechanic.

This to me looks like an analogy that would support what GP is saying. With modern farming practices you get problems like increased topsoil loss and decreased nutritional value of produce. It also leads to a loss of knowledge for those that practice those techniques of least resistance in short term.

This is not me saying big farming bad or something like that, just that your analogy, to me, seems perfectly in sync with what the GP is saying.