MurphyA/hacker-news huggingface dataset:
by mixedbit | 2026-02-05 09:08:44+00:00
I have investigated similar situation on Heroku. Heroku assigns a random subdomain suffix for each new app, so URLs of apps are hard to guess and look like this: test-app-28a8490db018.herokuapp.com.
I have noticed that as soon as a new Heroku app is created, without making any requests to the app that could leak the URL via a DNS lookup, the app is hit by requests from automatic vulnerability scanning tools. Heroku confirmed that this is due the new app URL being published in certificate authority logs, which are actively monitored by vulnerability scanners.
by dns_snek | 2026-02-05 09:08:54+00:00
> Cataloguing your fridge requires taking pictures of everything you add and remove which seems... tedious. Just remember what you have?

I have ADHD, I forget where I put things down 5 seconds ago and I forget what's in my fridge all the time. It's genuinely a big problem for me because I let things expire, buy things I already have, and just accumulate cruft that necessitates a big fridge clean once every few months which makes me feel bad about all the things I'm throwing away.

In an ideal world I want an up to date inventory on everything that's in my fridge with expiration reminders. I'd love for someone to solve this problem in a non-tedious way. Taking pictures of everything would indeed be tedious.
by duk3luk3 | 2026-02-05 09:08:56+00:00
Here's a complete refutation of your argument: Pretti did not attempt to "de-arrest" anyone at any point. Nobody, not even ICE, DHS, the White House, or the FBI has argued this.

Whoever told you this made it up. You should stop listening to whoever told you that. They are lying to you about this, and everything else they have told you is a lie too.
by wakawaka28 | 2026-02-05 09:09:03+00:00
I think this could be a scheme to get other countries to start paying for their own defense more, instead of relying on the US to do it. It is perhaps rude or undiplomatic, but it's supposed to be a kick in the ass. I remember Trump talking to EU leaders years ago to explain this to them, and nothing changed. Maybe now they got the message.
by elliotec | 2026-02-05 09:09:09+00:00
Yeah, I think a lot of this can be attributed to institutional and infrastructural inertia, abstraction debt, second+-order ignorance, and narrowing of specialty. People now building these things are probably good enough at React etc. to do stuff that needs to be done with it almost anywhere, but their focus needs to be ML.

The people that could make terminal stuff super fast at low level are retired on an island, dead, or don't have the other specialties required by companies like this, and users don't care as much about 16.7ms on a terminal when the thing is building their app 10x faster so the trade off is obvious.
by FooBarWidget | 2026-02-05 09:09:11+00:00
One pet peeve I have with virtual memory management on Linux is that, as memory usage approaches 100%, the kernel starts evicting executable pages because technically they're read-only and can be loaded from disk. Thus, the entire system grinds to a halt in a behavior that looks like swapping, because every program that wants to execute instructions has to load its instructions from disk again, only to have those instruction pages be evicted again when context switching to another program. This behavior is especially counter intuitive because disabling swap does not prevent this problem. There are no convenient settings for administrators for preventing this problem.

It's good that we have better swapping now, but I wish they'd address the above. I'd rather have programs getting OOMKilled or throwing errors before the system grinds to a halt, where I can't even ssh in and run 'ps'.
by ljm | 2026-02-05 09:09:21+00:00
I'm not that surprised because of how pervasive the 'move fast and break things' culture is in Silicon Valley, and what is essentially AI accelerationism. You see this reflected all over HN as well, e.g. when Cloudflare goes down and it's a good thing because it gives you a break from the screen. Who cares that it broke? That's just how it is.

This is just not how software engineering goes in many other places, particularly where the stakes are much higher and can be life altering, if not threatening.
by cope123 | 2026-02-05 09:09:24+00:00
Good points all around. I’m not modeling against a single extreme scenario like hyperinflation or world war. It’s more about general uncertainty and how many assets that are usually considered “safe” seem increasingly driven by speculation and sentiment.

I agree that long-term investing, diversification, and strategies like DCA matter far more than trying to time peaks or react to headlines. I’m mostly interested in how others balance psychological comfort with rational allocation during periods like this, when narratives feel louder than fundamentals.
by bpavuk | 2026-02-05 09:10:29+00:00
if someone on the DevOps team knows Nix, option 3 becomes a lot cheaper time-wise! yeah, Nix flakes still need maintenance, especially on the `nixos-unstable` branch, but you get the quickest disaster recovery route possible!

plus, infra flexibility removes random constraints that e.g. Cloudflare Workers have
by nosianu | 2026-02-05 09:10:35+00:00
> Honestly, I don’t want to be.

I don't get it.

On the other hand, programmers are happy to work with AI, which is incredibly limited and a pale shadow compared to the real "I" in educated and experienced meat brains.

Also, networking - in both space and time (among the living, the latter with the dead, one way from them to us) - is THE gigantic advantage of humans. Not to want to bother with it is an equally gigantic mistake, if you want to use being human to more than a tiny fraction of its potential.

If you are interested in creating solutions and useful systems, "politics", human networking, should be THE number one priority. Long before anything technical.

Important scientists and engineers were great networkers and communicators. They also knew which connections where worth making. Just like in the brain, fewer good connections are better than wildly cross-connecting everything.
by bigfatkitten | 2026-02-05 09:10:39+00:00
> Maintaining one server room in the headquarters is something, but two servers rooms in different locations, with resilient power and network is a bit too much effort IMHO.

Speaking as someone who does this, it is very straightforward. You can rent space from people like Equinix or Global Switch for very reasonable prices. They then take care of power, cooling, cabling plant etc.
by romanovcode | 2026-02-05 09:11:02+00:00
> - Willing to risk defense department contract over objections to use for lethal operations [1]

> The things that are concerning: - Palantir partnership (I'm unclear about what this actually is) [3]

Dude, you cannot put these two sentences together. The defense department was either a fluke or a PR stunt. If they partner with Palintir they absolutely do not care that their tech is going to be used for killing and other horrible deeds.

A company with morals (which does not exist BTW) would never partner with Palintir.
by account42 | 2026-02-05 09:11:03+00:00
We often only get the thing for a limited time period after it is lost forever because copyright has prevented the thing from being archived.

A lot of things that are copyrighted would have also been created anyway, often by multiple people, because there is an actual need for them to exist or an inherent human drive to create them. We have been creating things, both with practical applications or as art, long before we had copyright. And with the ability to effortlessly copy works at effectively no cost we do (or would) have an ever increasing library of them which reduces the need to encourage even more creation than what would happen anyway, especially when the cost of that encouragement is not only excessive but ends up impeding many creative endeavors.
by cope123 | 2026-02-05 09:11:07+00:00
I’ve been looking more closely at image metadata lately and was surprised how often GPS coordinates are still embedded in photos people share publicly.

Outside of major social networks, many platforms (forums, blogs, marketplaces, email, messaging apps) don’t reliably strip EXIF data, and GPS location seems to be the most sensitive part that goes unnoticed.

I’m curious how people here think about this in practice:
– Do you assume photos you share still contain location data?
– Have you ever seen real-world privacy or security issues caused by GPS metadata in images?
– Do you rely on platforms to remove metadata, or do you clean images yourself before sharing?

Interested in perspectives from people working with security, OSINT, journalism, or anyone who’s learned about this the hard way.
by fauigerzigerk | 2026-02-05 09:11:15+00:00
I'm not disputing that there are situations where it makes sense to pay a high risk premium. What I'm disputing is that price doesn't matter. I get the impression that companies are losing the capability to make rational pricing decisions.

>Unless on premises helps the bottom line of the main product that the company provides, these decisions don't really matter in my opinion.

Well, exactly. But the degree to which the price of a specific input affects your bottom line depends on your product.

During the dot com era, some VC funded startups (such as Google) made a decision to avoid using Windows servers, Oracle databases and the whole super expensive scale-up architecture that was the risk-free, professional option at the time. If they hadn't taken this risk, they might not have survived.

[Edit] But I think it's not just about cloud vs on-premises. A more important question may be how you're using the cloud. You don't have to lock yourself into a million proprietary APIs and throw petabytes of your data into an egress jail.
by benterix | 2026-02-05 09:12:00+00:00
> I hope I am wrong, because if I am right, it's a con game.

I don't think they perceive it as a con game, on the contrary. They say below:
"we also recently reduced the thinking effort in ChatGPT. Our intent here was purely user experience, not cost savings."

They are not the only ones playing this game. Google did the same with Gemini Pro.
by gingersnap | 2026-02-05 09:12:04+00:00
But I actually think that one if the bigger arguments for single language models is the ability to have more languages. Im from Sweden, so I would like to have swedish on extremly high level, but I wouldnt like to have all other small languages on that level beacuse it would inflate the size. So, I actually think having multiple single language models, make it wider and deeper
by juvoly | 2026-02-05 09:12:22+00:00
> Cloud companies generally make onboarding very easy, and offboarding very difficult. If you are not vigilant you will sleepwalk into a situation of high cloud costs and no way out. If you want to control your own destiny, you must run your own compute.

Cost and lock-in are obvious factors, but "sovereignty" has also become a key factor in the sales cycle, at least in Europe.

Handing health data, Juvoly is happy to run AI work loads on premise.
by maldev | 2026-02-05 09:12:32+00:00
The dude asked a question and you're basically trying to intimidate him. Not only that, but your profile clearly says you aren't even American. Maybe you should focus on your own politics, or things you understand, and not try to threaten people. I personally, am glad we have this, so I don't experience what I do when I go to Europe, and get a bunch of illegal Africans terrorizing people in front of police. Or let alone the no go zones.

I'm glad, to have spend most of my career in the government to stop these people coming in and terrorists. Which is why I can report, the US has a very low terror rate, especially when you look at foreign extremists, unlike other parts of the world.
by Brybry | 2026-02-05 09:13:45+00:00
A little over 100 years ago women were only 20% of the labor force. [1] Which is to say, most women did not participate in wage employment.

Now they're ~47%. Which is great! But it also hints that society doesn't need most of the labor for the system to still function.

[1] https://www.dol.gov/agencies/wb/about/history
by sReinwald | 2026-02-05 09:14:20+00:00
Not saying the frontier models aren't smarter than the ones I can run on my two 4090s (they absolutely are) but I feel like you're exaggerating the security implications a bit.

We've seen some absolutely glaring security issues with vibe-coded apps / websites that did use Claude (most recently Moltbook).

No matter whether you're vibe coding with frontier models or local ones, you simply cannot rely on the model knowing what it is doing. Frankly, if you rely on the model's alignment training for writing secure authentication flows, you are doing it wrong. Claude Opus or Qwen3 Coder Next isn't responsible if you ship insecure code - you are.
by rcxdude | 2026-02-05 09:14:24+00:00
It seems only the very simplified narrative actually sticks, especially when it is convenient for anti-establishment types to do so (and realistically, approximately no-one really _likes_ Wall Street). But I think it's important to consider that while probably the government didn't go as far as it could, it did for the most part help prevent the crisis from getting worse for those who were not responsible while for the most part not doing much for the people working in finance, especially those that they could nail for outright fraud.
by kjksf | 2026-02-05 09:14:50+00:00
I think there are 0 people in NBA that don't have natural ability placing them in 1% of general pop.

Your statement might be applicable to jobs that can be performed more than adequately by 20% percentile talent but not to most sports or music, which have brutal odds due to "winner takes most" dynamics.

There are 540 NBA players. There are ~40 million men aged 18-35 in US.

To beat those odds you have to supremely talented and supremely hard working.

Contrast this with estimated 1.6-4.4 million software engineers.

You can be mid but hard working programmer and beat brilliant but otherwise flawed programmer (not as hard working, oblivious to politics etc.), for some definition of "beat" (like better pay or higher position in company).

As to people in leadership position: consider that to succeed as a manager / leader is more about being good at politics than at solving complex equations.

Then again, the outsized successes were created by competent leaders: Bill Gates, Steve Jobs, Jeff Bezos.
by lsofzz | 2026-02-05 09:14:52+00:00
wtf are you allowing plex to initiate outbound connections to begin with?

and why is plex not in it's own VLAN with a egress FW rules to second with?

lastly, why aren't you running snort/suricata to inspect the packets originating at plex?

let me solve this problem for you - it probably doesn't bother you at all.

otherwise, you'd scratched your itch a long time ago.

> Clueless lol.

It's ok to be clueless. And, it's ok to be working for a FAANG and be clueless too.
by arjie | 2026-02-05 09:15:07+00:00
Realistically, it's the speed with which you can expand and contract. The cloud gives unbounded flexibility - not on the per-request scale or whatever, but on the per-project scale. To try things out with a bunch of EC2s or GCEs is cheap. You have it for a while and then you let it go. I say this as someone with terabytes of RAM in servers, and a cabinet I have in the Bay Area.
by sham1 | 2026-02-05 09:15:59+00:00
I'll be honest, I don't think I've ever actually heard someone give a reason why the US having open borders would be a bad thing. You are a country of immigrants, and your greatness was built upon that foundation.

Yet now it's getting undone for seemingly no reason. But I hope that there would actually be one, so please enlighten me and the other commenters.
by DyslexicAtheist | 2026-02-05 09:16:14+00:00
this is what we did in the 90ies into mid 2000:

> Buy and colocate the hardware yourself – Certainly the cheapest option if you have the skills

back then this type of "skill" was abundant. You could easily get sysadmin contractors who would take a drive down to the data-center (probably rented facilities in a real-estate that belonged to a bank or insurance) to exchange some disks that died for some reason. such a person was full stack in a sense that they covered backups, networking, firewalls, and knew how to source hardware.

the argument was that this was too expensive and the cloud was better. so hundreds of thousands of SME's embraced the cloud - most of them never needed Google-type of scale, but got sucked into the "recurring revenue" grift that is SaaS.

If you opposed this mentality you were basically saying "we as a company will never scale this much" which was at best "toxic" and at worst "career-ending".

The thing is these ancient skills still exist. And most orgs simply do not need AWS type of scale. European orgs would do well to revisit these basic ideas. And Hetzner or Lithus would be a much more natural (and honest) fit for these companies.
by utopiah | 2026-02-05 09:17:34+00:00
> great for micropayments globally

My personal Website supported WebMonetization (details https://webmonetization.org ) for more than 5 years already so no need to convince me about that, I agree. I also believe one could just as easily have a funding.md with an IBAN and structured communication to make the equivalent.

Anyway that's beside the point, what I still don't get is a use case without or without AI according to the constraints I listed before.
by bonesss | 2026-02-05 09:17:48+00:00
A company I worked at years ago had a devious and exploitative approach to market domination: hiring older super experienced workers and plugging them into teams with young over-eager programmers…

People with deep industry knowledge who were trained up to be decent programmers (middling, but serious, consistent, and quality focused), setting the direction. Those domain experts were working with young dumbasses who would burn 60+ hour weeks to make sales deadlines and keep current with ever shifting platform tech that breaks all the time. SMEs baked into the core development loop, DDD-made-flesh essentially, with cheaper more junior devs supporting scale for less money and maximizing the SMEs vision/contributions.

It’s an obvious and effective strategy. I’d speculate the management skills it takes to setup are what keep it as a rarity.
by jacquesm | 2026-02-05 09:17:56+00:00
> Not only that, but your profile clearly says you aren't even American. Maybe you should focus on your own politics, or things you understand, and not try to threaten people.

I'm not threatening anybody, I'm just pointing out that in the aggregate anonymity does not exist as told by TFA whereas the GP seems to believe it holds some weight. The only reason you are able to write your comment is simply because I'm not hiding.

You on the other hand are.

> I personally, am glad we have this, so I don't experience what I do when I go to Europe, and get a bunch of illegal Africans terrorizing people in front of police. Or let alone the no go zones.

Funny, that hasn't happened to me yet. What also hasn't happened to me yet is that I got shot in the face at a protest.

But: you are part of the problem, you believe you are part of the solution. The fact that you believe that you are part of the solution but you're not proud enough of it to do so under your own name tells the whole story. It's the equivalent of the mask of those ICE goons.

https://jacquesmattheij.com/if-you-have-nothing-to-hide/

https://jacquesmattheij.com/trackers/

> I'm glad, to have spend most of my career in the government to stop these people coming in and terrorists. Which is why I can report, the US has a very low terror rate, especially when you look at foreign extremists, unlike other parts of the world.

That has something to do with two oceans and nothing at all with your efforts.
by imtringued | 2026-02-05 09:18:00+00:00
Because sentry.io is a commercial application monitoring tool which has zero incentive to any kind of application monitoring on non-paying customers. That's just costs without benefits.

You now have to argue that a random third party is using and therefore paying sentry.io to do monitoring of random subdomains for the dubious benefit of knowing that the domain exists even though they are paying for something that is way more expensive.

It's far more likely that the NAS vendor integrated sentry.io into the web interface and sentry.io is simply trying to communicate with monitoring endpoints that are part of said integration.

From the perspective of the NAS vendor, the benefits of analytics are obvious. Since there is no central NAS server where all the logs are gathered, they would have to ask users to send the error logs manually which is unreliable. Instead of waiting for users to report errors, the NAS vendor decided to be proactive and send error logs to a central service.
by Lio | 2026-02-05 09:18:08+00:00
For the usecase of "How do I do thing X in Excell" you could probably get pretty far with just adding a small, local LLM running on the user's machine.

That would move the cost of running the model to the end user but it would also mean giving up all the data they can from running prompts remotely.

It would probably also make Office users more productive rather than replacing them completely and that's not the vision that Microsoft's actual customers are sold on.
by kjksf | 2026-02-05 09:20:21+00:00
At the same time, I can refuse to be a loser in chess and I'll still have 0% chance of beating Magnus Carlsen.

I'm very much a proponent of hard work to the best of your ability but I'm also a realist.

I'm pretty good at programming. I doubt Usain Bolt would ever be as good as I am at programming, even if he tried, and I certainly wouldn't be even close to be as good as Usain Bolt in running no matter how hard I tried.

I know how fast I was running in high school compared to 30 of my peers (my class) and there was never a path from there to a world class athlete.
by adamcharnock | 2026-02-05 09:20:29+00:00
Fair point!

5 - Datacenter (DC) - Like 4, except also take control of the space/power/HVAC/transit/security side of the equation. Makes sense either at scale, or if you have specific needs. Specific needs could be: specific location, reliability (higher or lower than a DC), resilience (conflict planning).

There are actually some really interesting use cases here. For example, reliability: If your company is in a physical office, how strong is the need to run your internal systems in a data centre? If you run your servers in your office, then there's no connectivity reliability concerns. If the power goes out, then the power is out to your staff's computers anyway (still get a UPS though).

Or perhaps you don't need as high reliability if you're doing only batch workloads? Do you need to pay the premium for redundant network connections and power supplies?

If you want your company to still function in the event of some kind of military conflict, do you really want to rely on fibre optic lines between your office and the data center? Do you want to keep all your infrastructure in such a high-value target?

I think this is one of the more interesting areas to think about, at least for me!
by sahands | 2026-02-05 09:20:32+00:00
I’ve spent the last two years building qeep, a deep learning framework written entirely in Go.

Why I built this: While Go has some great math libraries, I wanted a framework that felt more like PyTorch (declarative API) but stayed true to Go’s simplicity. I also wanted to deeply understand how AutoGrad and CUDA kernels interface with Go’s runtime and memory management.

Key Features:

- Multi-Dimensional Tensors with a wide range of linear algebra and statistical operations.

- Automatic differentiation (AutoGrad) for tensors.

- GPU acceleration via CUDA for high-performance large tensor computations.

- A variety of neural network components, such as fully connected (FC) layer.

- A declarative API for defining neural networks using stream package.

Repo: https://github.com/sahandsafizadeh/qeep