MurphyA/hacker-news huggingface dataset:
by nebezb | 2026-02-01 14:05:51+00:00
Tailscales founders are Canadian, principled, and are very sensitive to Canadian needs. I very much trust Avery and team to do what’s necessary to keep US hands off the data.

edit: someone pointed out they’ve signed new users on to a US co. 15 months ago. I made the statement without knowing this. they aren’t as capable as I originally claimed.
by bronco21016 | 2026-02-01 14:06:27+00:00
> In your scenario a couple of 5W handhelds woukd work better.

Exactly, in nearly every “off-grid”/no cell service scenario where I’ve needed comms, the GMRS radios > Lora.

Its an interesting idea but I can’t go site prep 100s of miles of snowmobile trail before I go just to be able to send a text to someone a mile away.
by giantg2 | 2026-02-01 14:06:34+00:00
I had a mid-level submit a PR implementing caching. I had to reject it multiple times. They were using Copilot and it couldn't implement it right and the developer couldn't understand it. Stuff like always retrieving from the API instead of the cache, or never storing the object in the cache after retrieving it.

They promoted that guy over me because he started closing more stories than me and faster after he started using Copilot. No wonder that team has 40% of its capacity used for rework and tech debt...
by somepleb | 2026-02-01 14:06:47+00:00
Netbird has supposedly done a penetration test, but it is only supplied upon request [0]. I haven't bothered trying to get my hands on it since I don't use their product. I don't agree with gatekeeping the results instead of making them public.

NetBird should also consider publishing an SBOM, similar to what Defguard does.[1].

[0] https://trust.netbird.io/

[1] https://defguard.net/sbom/
by rco8786 | 2026-02-01 14:07:00+00:00
Right so apply the exact same logic to LLMs as you did to the internet.

At first the internet was unreliable. Nobody could trust the information it gave you. So teachers insisted that students only use their trusted sources. But eventually the internet matured and now it would be seen as ridiculous for a teacher to tell a student not to do research on the internet.

Now replace "the internet" with "LLMs".
by jqpabc123 | 2026-02-01 14:09:06+00:00
Long story short, the world's largest privacy invaders have every incentive to subvert your privacy.

They do this at every opportunity. It's their bread and butter. It's how they make money.

The only reasonable assumption when dealing with them is that your privacy is being compromised. Proving it may not be possible but the incentive alone should be enough to convince a reasonable person that they do not deserve trust.
by Dumas007 | 2026-02-01 14:09:10+00:00
The US has several things backing it currency ...oil/gas, gold, oil- processing efficiencies, the value of the world's largest companies ....AND (not to mention) an unrivaled armed force. Lol. BUT, every barrel of oil to emerge from the ground is immediately priced in US dollars. Hence ....a liquid printing press. GDTA.
by kohlschuetter | 2026-02-01 14:10:54+00:00
Disconnected as in "network"? What PCIe card do you use? Can you update the firmware (maybe from Windows)?

Also check the BIOS settings (try setting TB security to "No Security" or "User Authorization")

Some OEM Mellanox cards can be cross-flashed to NVIDIA's stock firmware, maybe that's also relevant.
by Noaidi | 2026-02-01 14:13:00+00:00
Yes, I think it is. And I am one of these people who are sensitive to electromagnetic fields. Both radio frequency and lower frequency magnetic and electric fields.

No, I’m not running around with a tinfoil hat on thinking that it’s going to kill me, but it does cause me, insomnia, nightmares, and a worsening of my mood disorder.

The problem is since voltage gated ion channels are also associated with mood disorders[1] and are, I believe, how EMF’s effect certain people, then it’s easy to play our sensitivity off as just our mood disorder.

[1] https://pmc.ncbi.nlm.nih.gov/articles/PMC3646240/
by ichbinsoftware | 2026-02-01 14:13:05+00:00
Hi HN,

I recently open-sourced my electronic album Everything Is Free (CC0), but I wanted to go a step further than just providing files.

I built Everything Is Remixed, a browser-based stem mixer that lets you mix the raw audio tracks (volume, pan, EQ, reverb, delay) in real-time.

The Tech Stack:
- Core: Pure Web Audio API (no external audio libraries)
- State: The entire mix configuration (fader positions, effects settings, mutes) uses a custom encoding scheme compressed directly into the URL. There is no database.
- Architecture: Cloudflare Workers + R2 for hosting the stems, but the mixing logic is 100% client-side.

You can try the album mixer here: https://evr.ichbinsoftware.com/

Try a pre-configured mix: https://evr.ichbinsoftware.com/hydrogen?mix=0:75:0:0:-3,1:90...

Or load your own audio files in the standalone version: https://mixer.ichbinsoftware.com/

The code is open source and CC0: https://github.com/ichbinsoftware/everythingisremixed

I'd love feedback on the audio engine performance or the compression approach!
by CharlieDigital | 2026-02-01 14:13:14+00:00
I started my career doing ~20 years of C# from pretty much the very beginning (JavaScript even before then!).

Around 2020, I switched into the startup space and quickly picked up TypeScript since that's "what the kids use". It wasn't without struggles, but once I wrapped my head around TypeScript as "shapes for JavaScript", it clicked.

At the time, the startup was undertaking a new product built on Nest.js[0] which looked awfully similar to ASP.NET web APIs which had the benefit of being much more mature, complete, and with one of the best ORMs (EF Core). I suggested it to the team and was a bit shocked by the pushback.

It ultimately inspired me to do a bunch of writing [1][2] on just how similar these two languages are and how they've converged on syntax (no doubt owing to Anders at the helm). Of course, they ultimately still have quite a bit of a gap, but for teams that are working in TS and finding that they are outgrowing it, C# is a very natural choice.

I left that startup after a short stint, but boomeranged almost 3 years later. Company went from seed to series C in that time. End of last year, we started the migration from TypeScript on the backend to C# on the backend and haven't looked back. The toolchain is far simpler and stable, the "default" ORM is far more flexible and powerful, the more rigorous type chain seems more conducive for agent-driven coding. Team adapted relatively quickly within ~4 weeks.

[0] https://nestjs.com/

[1] https://typescript-is-like-csharp.chrlschn.dev/

[2] https://itnext.io/getting-functional-with-c-6c74bf279616
by valleyer | 2026-02-01 14:13:17+00:00
Here's OpenAI's docs page on how they sandbox Codex: https://developers.openai.com/codex/security/

Here's the macOS kernel-enforced sandbox profile that gets applied to processes spawned by the LLM: https://github.com/openai/codex/blob/main/codex-rs/core/src/...

I think skepticism is healthy here, but there's no need to just guess.
by haunter | 2026-02-01 14:14:32+00:00
> Not every open source project exists to solve geopolitical problems, and not every contributor arrives with a policy agenda. FOSDEM has always thrived on its diversity of motivations, and maintaining that balance will be increasingly challenging.

It’s not just the FOSS scene but there is an increasing crowd (mostly on the internet) of “everything is political”. Honestly I’m not sure what will happen in the coming years but personally I try to take a step back and detach myself from
all these things. Some (even here on HN) call this as privilege but then so be it I value my mental health more.
by Noaidi | 2026-02-01 14:14:34+00:00
You’re making an assumption here that it was not the increased iron in her body that made them more sensitive to electromagnetic fields. I mean, I’m not saying it’s true or not but that’s the mistake. You’re making in your argument.

I do believe that a lot of people who don’t have the sensitivity find it something easy to blame, but they approach figuring it out with zero scientific thought.
by dave78 | 2026-02-01 14:15:18+00:00
Nebula just had a major release that added IPv6 support for overlay networks. Hardly maintenance mode.

The main company working on it now seems to be adding all the fancy easy-to-use features as a layer on top of Nebula that they are selling. I personally appreciate getting to use the simple core of Nebula as open source. It seems very Unix-y to me: a simple tool that does one thing and does it well.
by jmaker | 2026-02-01 14:15:59+00:00
> - They put all the privacy controls in one place in Settings so you can audit

That’s true. On Pixel Android, there’s several unrelated places in the various settings for the device and for the Google account to take care of and see that they do not collide. And for every function there’s always some sort of small print like “it’s all private to you unless you choose to share” - but to use any of the features/services you have to “share” like with Google Photos and Calendar and Tasks, you lose track of what you share with whom in the end. So essentially not only the metadata is collected but also the content and nothing’s private as a result, at least that’s what I got to understand. And even if you ask Google to delete your personal information, it will retain it for a while for compliance purposes.

As for

> - App developers are mandated to publish what they collect when publishing apps to the App Store.

I believe that’s still moot and rather a voluntary disclosure that no one vets. I’ve seen apps with no collection stated on App Store but deviating privacy policies, or app functions that contradicted their own privacy policy.

From what I heard and read, I understood that as a well-meant idea but still a misconception on the consumer part due to lack of enforcement by Apple.
by kkfx | 2026-02-01 14:16:31+00:00
Ugh, containers/VMs are black boxes because in common practice you just pull the image as-is without bothering to study what's inside, without checking things like outdated dependencies left behind, some dev's forgotten SSH keys, and so on. There are companies that throw the first image they find from who-knows-who into production just because "it should have what I'm looking for"...

Are they knowable? Yes, but in practice they're unknown.

They waste resources because they duplicate storage, consume extra RAM, and so on to keep n common elements separate, without adding any real security, and with plenty of holes punched here and there to make the whole system/infra work.

This is also a terrible thing in human terms, led to a false sense of security. Using full-stack virtualization increases the overhead on x86 even more with no substantial benefit as well.

ZFS has a codebase that's not easy, sure, but using it is dramatically simple. On GNU/Linux the main problem is not being a first-class citizen due to the license and being a port from another OS, not something truly native even though a lot has been done to integrate it. But `zpool create mypool mirror /dev/... /dev/...` is definitely simple, as is `zfs create mypool/myvol` and so on... Compared to mdadm+luks+{pv,vg,lv}* etc. there's no comparison, it's damn easier and clearer.
by accrual | 2026-02-01 14:17:04+00:00
I manage a pf.conf with about 400 rules across a dozen VLANs, I find it intuitive and even enjoyable to work on. It feels kinda like editing source code - there are some host, network, and port declarations at the top, a section for NAT and egress, then a section for each VLAN that contains the pass in/pass out rules.

I tail the pflog0 interface in a tmux session so I can keep an eye on pass/block, and also keep a handy function in my .profile to make it easy to edit the ruleset and reload:

function pfedit {
vi /etc/pf.conf && \
pfctl -f /etc/pf.conf && \
{ c=`pfctl -s rules | wc -l | tr -d ' '`; printf 'loaded %s rules\n' "$c"; }
}

This opens the file for editing, reloads the ruleset (which also validates it), then returns the rule count if successful.
by MrGilbert | 2026-02-01 14:17:11+00:00
Basically the very first part from your list: Remembering context. Working with people means that a lot of what I'm observing or what is happening will happen at a later stage. It tremendously helps to go back a few months and dig up my notes from back than, either to connect the dots to a development or reduce the "he said, she said" - dance that happens way too often.

I also like that fact that I can just scroll down a long list of entries, when I'm not sure about the exact words I used in this situation to note something down, or when I just remember the rough timeframe something happened.
by jdkoeck | 2026-02-01 14:17:32+00:00
Internet access is required to install third party packages, so given the choice almost no one would disable it for a coding agent sandbox.

In practice, it seems to me that the sandbox is only good enough to limit file system access to a certain project, everything else (code or secret exfiltration, installing vulnerable packages, adding prompt injection attacks for others to run) is game if you’re in YOLO mode like pi here.

Maybe a finer grained approach based on capabilities would help: https://simonwillison.net/2025/Apr/11/camel/
by superkuh | 2026-02-01 14:18:04+00:00
I've been repeating this ("a law") since the Snowden leaks days. I was so sure. But I tried to look up my reference for it (it was Wired) and I'm just not finding it and indeed I'm finding government memos (https://web.archive.org/web/20160112232215if_/http://www.wir...) that show it isn't true.

I'm sorry. It is not a law. I am wrong. Thank you for the correction and preventing me from continuing to repeat this embarrassing falsehood.

That said, they do still collect and use this data and turning off GPS doesn't do anything.
Show HN: Codey – Keep a time‑aligned log of CLI agent inputs and Git commits
by joway | 2026-02-01 14:18:12+00:00
Hi HN,

I built codey, a small CLI wrapper for code‑agent tools (Codex / Claude / OpenCode). It runs
the agent inside a PTY so the original TUI stays intact, and on exit it:

- Records the user input lines (what you actually submit)
- Reads new git commits since last run
- Generates/updates a local codey.html with a two‑column timeline:
- Left: commits (message, author, hash, time)
- Right: your inputs

Why: I wanted a lightweight way to review “what I asked the agent” in the same timeline as
my git history.

Usage:

pip install codey-cli
codey codex .

The HTML is local and incremental (state is embedded in the file).
Feedback welcome, especially on edge cases and terminal input parsing.
by lotsofpulp | 2026-02-01 14:18:26+00:00
"A lot" is arbitrary, as would be the expectation that men and women would have the same longevity (absent medical intervention).

It seems evident that the taller you are, the less life expectancy you have from the simple fact that the heart has to work harder.

Hence, since men are usually taller than women, it might also be expected for men to die younger.

I am making the following scenario up, but what if a difference in men and women's bodies causes men to process cholesterol differently, and increases the probability of atherosclerosis and/or arteriosclerosis. Perhaps it happens simply because men eat more than women, and this compounds over decades of life, eventually resulting in the difference in average age at death.
by Nextgrid | 2026-02-01 14:18:41+00:00
WoL is reliable when waking from sleep/suspend. I have yet to see consumer HW that can do it from poweroff. But if suspend is fine, all you have to do is configure your firmware to turn on after power loss (so you always boot into your OS) and in your OS enable WoL and configure suspend on inactivity as you wish. It should be reliable and failures would default to "on", not off.
by jmogly | 2026-02-01 14:18:43+00:00
Early in my career I would build something I thought was useful, deploy it, meet with people within the company to get people to start using it. A lot of effort for something that would have a positive impact. My manager would schedule a meeting with me, and with a look of panic open with, “why didn’t you tell me about this or why did you do this?”. I understand now that before you start something, you need to decide who you are going to give credit to, and that person needs to be made aware that they will get credit for the project. Ideally your boss’s boss’s boss. Corporate caché only exist insofar as leadership allows it to exist, you gotta play the game. Pawns don’t get to take the glory for themselves.
by omgtehlion | 2026-02-01 14:19:23+00:00
Ha! Been running these for years on both linux and windows (on lenovo x1 laptops). Using cheap chinese thunderbolt-to-nvme adapters + nvme-to-pcie boards + mellanox cx4 cards (recently got one cx5 and a solarflare x2).

Pic of a previous cx3 (10 gig on tb3) setup: https://habrastorage.org/r/w780/getpro/habr/upload_files/d3c...

10gig can saturate full speed, 25G in my experience rarely reaches same 20G as the author observed.
by mkreis | 2026-02-01 14:19:35+00:00
Bootstrapped solo dev here. I enjoyed using Claude to get little things done which I happed on my TODO list below the important stuff, like updating a landing page, or in your case perhaps adding automated testing for the frontend stuff (so you don't have to click yourself). It's just nice having someone coming up with a proposal on how to implement something, even it's not the perfect way, it's good as a starter.
Also I have one Claude instance running to implement the main feature, in a tight feedback loop so that I know exactly what it's doing.
Yes, sometimes it takes a bit longer, but I use the time checking what the other Claudes are doing...
Hack Your Health and Get 300 Health Metrics with AI
by accofrisk | 2026-02-01 14:19:44+00:00
For the past decade, wearable health devices have been limited to measuring 20 or so metrics - heart rate, blood pressure, blood oxygen saturation, and steps. Steps, in particular, have become a kind of health ritual: walk more, count them carefully, and all will be fine. Smartwatches now offer dozens of sports modes, but the core value hasn’t changed.

Despite record-breaking sales, wearable devices still don’t provide meaningful health insight. What are users really paying for, and what does a subscription deliver? The real breakthrough comes from turning a wearable into a full laboratory on the wrist - and AI is already making this possible.

By early 2026, our team trained AI to measure more than 300 health parameters from a single wrist pulse signal. The data is sent to an AI-powered cloud, where it is transformed into a full health profile. Users access insights across metabolism and endocrinology, blood and microcirculation, cardiovascular and respiratory function, liver and kidney health, brain and cerebral circulation, as well as lifestyle factors like sleep, activity, stress, emotions, nutrition, and medication adherence. The result is a system-level view rather than isolated numbers.

Continuous measurement during sleep is particularly valuable. Nighttime data is cleaner, more stable, and far more predictive than daytime readings. Our “Digital Sleep” mode enables early risk detection and long-term trend analysis that would otherwise be impossible.

We go beyond tracking. Abnormal readings already signal potential problems, but our AI predicts disease risks before symptoms appear. The Health Assistant evaluates risks, connects physiological data with lifestyle patterns, and generates personalized recommendations. The most important advice remains - consult a physician and pursue further evaluation when necessary.

Our sensor architecture is simple - devices only need to collect a pulse signal. This allows integration into third-party devices and large-scale remote health monitoring. Organizations can track employee or patient health, improve safety, and make decisions based on real physiological data. Enterprise use cases include remote medical screenings, restricting vehicle operation if a driver is unwell, or temporarily removing an employee from duty due to stress - even when no external signs are visible.

The key transformation in health monitoring is the shift from measurement to prediction. AI turns wearables from fitness gadgets into preventive and predictive health tools. Cloud intelligence makes any device a full monitoring platform, while sleep-based continuous data provides the most reliable foundation for long-term risk assessment.

Soon, the first question a doctor asks may no longer be “What are your symptoms?” but “Please share your health data from the past week.” Don’t explain - just share.
by PaulHoule | 2026-02-01 14:19:47+00:00
Test and build are things that fall through the cracks and working on them can get outright hostility from management and other team members in some places, indifference in others.

At one place I worked nobody could give me a reliable build procedure, I settled in on one that was 40 min and worked reliably. I complained at every team meeting about the slow build and nobody cared. I put in a ticket for the slow build and was asked “how does this help the end user?” and my answer was “if my build was faster the end user would have had the product six months ago”

Where I am now I have a “maintenance droid” that automates a mildly polyglot build and when it runs into trouble it applies various levels of cleaning and every few months I run into some problem where it gets different results from my supervisor and/or the CI system and these days it always turns out to be right.
by galangalalgol | 2026-02-01 14:22:00+00:00
It can speculate whether an optimization is performant. Not whether it is sound. I don't know enough about java to say that it doesn't provide all the same soundness guarantees as other languages, just that it is possible for a jit language to be hampered by this. Also c# aot is faster than a warmed up c# jit in my experience, unless the warmup takes days, which wouldn't be useful for applications like games anyway.
by lotsofpulp | 2026-02-01 14:22:01+00:00
When Fire-Dragon-DoL writes

>That 5 years difference between men and women keeps being biologically weird

The implication is that the "biological" expectation would be that men and women have the same life expectancy, absent medical intervention and societal standards and whatnot.

But it is possible that, due to having different biologies, men and women simply have different life expectancies. Similar to how men and women have different muscle mass and bone densities and height and yada yada.

Obviously, external factors could also be a factor, but my point is "internal" factors are also in play.
by wtcactus | 2026-02-01 14:23:40+00:00
Well, unfortunately I still don’t have access to the hyper sophisticated god like AI that you, in your immense intellect, created, Michael. So I had to use a lesser one.

Of I did though, I’m sure my answer to your - extremely snarky and intelligent - remark world be a text that would stand in the shoulders of giants, together with Ulysses, The Divine Comedy and The Aeneid.
by kdps | 2026-02-01 14:25:29+00:00
It's not really surprising given the implementations. The C# stdlib just exposes more low-level levers here (quick look, correct me if I'm wrong):

For one, the C# code is explicitly using SIMD (System.Numerics.Vector) to process blocks, whereas Go is doing it scalar. It also uses a read-only FrozenDictionary which is heavily optimized for fast lookups compared to a standard map.
Parallel.For effectively maps to OS threads, avoiding the Go scheduler's overhead (like preemption every few ms) which is small but still unnecessary for pure number crunching. But a bigger bottleneck is probably synchronization: The Go version writes to a channel in every iteration. Even buffered, that implies internal locking/mutex contention. C# is just writing to pre-allocated memory indices on unrelated disjoint chunks, so there's no synchronization at all.