MurphyA/hacker-news huggingface dataset:
by JumpCrisscross | 2026-02-21 10:42:39+00:00
> it makes me very curious about what they’ve created this time

The rainbow and sunset alerts are really cool ideas. I'm now realising that a simple tie-in to astronomical phenomena could prompt a useful notificationa around it e.g. being worth going stargazing that night. I ski–learning that the near-term forecasts just changed would help me change my schedule the day before versus trying and failing the morning of.
by VorpalWay | 2026-02-21 10:43:43+00:00
Each commit should be small, have a descriptive commit message and be stand alone. I consider the Linux kernel a good example of how to do commits and messages right. Often the commit message is longer than the code change.

I strive to do that when making commits for work too, and that helps when going back in history and looking at history to motivate why a change was made.

While working I rebase all the time to move changes into the relevant commit, I don't find that particularly hard or time consuming. Doing this upfront is easy, splitting commits after the fact is not.

I consider this standard practice, at least in the sector I work in (industrial equipment control software, some of which is considered human safety critical).
by cthalupa | 2026-02-21 10:44:57+00:00
Calling it partially successful when Clinton lost more electoral votes to faithless electors than Trump did and it had zero impact on the outcome of the election is interesting.

But no, because electors deciding how they cast their votes is a matter of state legislation, not federal, and it is a wildly different thing than the candidate himself trying to install fake electors.

The faithless electors were chosen as part of the political process, and the founders expressly stated that the electors having the freedom to cast their vote was part of the safeguard against mob rule by an uninformed electorate. Hamilton, for example, wrote extensively of this in the federalist papers. This is explicitly one of the reasons why we have the electoral college at all, instead of a popular vote. If anything, I wish they had had the foresight to codify it in the Constitution or Bill of Rights so that states could not prevent it from happening. They wrote extensively of what they wanted the EC to be but did not do enough to make reality match their expectations in a durable manner.

Meanwhile Trump explicitly worked to install a group of illegally selected electors while riling up a mob to attempt to put a halt to the certification.

Trying to compare electors casting their vote based on how the founding fathers envisioned the electoral college as working to a sitting president being involved in a coordinated effort to create and install fake electors, cause the certification of the election to fail by inciting a mob to storm the capitol, and oh, telling Georgia to "find me the votes" is absurd.
by gapan | 2026-02-21 10:45:55+00:00
> The deeply nested menu for entering the url, that’s bad, I agree.

I'm not saying it is perfect, but it was not that bad, really. It's only one level down. And then you could also use a keyboard shortcut for it, which is always faster than anything mouse-driven if your hands are on the keyboard, which they would be, if you wanted to type a URL.

And even if you had to use the mouse, there is an interface feature we have lost: tear-off menus. If you found that you needed something in a nested menu often, you could simply tear-off that submenu and pin it on your desktop so you can always have direct access.
by imiric | 2026-02-21 10:46:28+00:00
> Weather requires ongoing costs.

I strongly doubt that this company runs their own weather stations or meteorological models. Their only recurring cost is API access to the companies that provide weather data, a negligible amount of IT infrastructure, and their employees. Considering that there are many free weather APIs, and that a polished frontend can be built by a single person, what exactly are the overheads?

To be fair, I'm not criticizing the subscription model. I think it makes sense for software that needs to be continually maintained. But a weather app shouldn't have large maintenance costs that couldn't be covered by a one-time payment. A big reason why companies love the Apple ecosystem is because subscriptions have been normalized, and users are used to paying them regardless if the model actually makes sense for the type of software.
by rvz | 2026-02-21 10:46:37+00:00
Because the author of the blog is paid to post daily about nothing but AI and needs to link farm for clicks and engagement on a daily basis.

Most of the time, users (or the author himself) submit this blog as the source, when in fact it is just content that ultimately just links to the original source for the goal of engagement. Unfortunately, this actually breaks two guidelines: "promotional spam" and "original sourcing".

From [0]

"Please don't use HN primarily for promotion. It's ok to post your own stuff part of the time, but the primary use of the site should be for curiosity."

and

"Please submit the original source. If a post reports on something found on another site, submit the latter."

The moderators won't do anything because they are allowing it [1] only for this blog.

[0] https://news.ycombinator.com/newsguidelines.html

[1] https://news.ycombinator.com/item?id=46450908
by runeks | 2026-02-21 10:46:51+00:00
> It's 2.5kW so it likely won't sit in your computer (quite beyond what a desktop could provide in power alone to a single card, let alone cool). It's 8.5cm^2 which is a beast of a single die.

I wonder how you cool a 3x3cm die that outputs 2.5 kW of heat. In the article they mention that the traditional setup requires water cooling, but surely this does as well, right?
by ggrab | 2026-02-21 10:48:36+00:00
IMO the security pitchforking on OpenClaw is just so overdone. People without consideration for the implications will inevitably get burned, as we saw with the reddit posts "Agentic Coding tool X wiped my hard drive and apologized profusely".
I work at a FAANG and every time you try something innovative the "policy people" will climb out of their holes and put random roadblocks in your way, not for the sake of actual security (that would be fine but would require actual engagement) but just to feel important, it reminds me of that.
by zozbot234 | 2026-02-21 10:48:58+00:00
You could run them in a container and put access to highly sensitive personal data behind a "function" that requires a human-in-the-loop for every subsequent interaction. E.g. the access might happen in a "subagent" whose context gets wiped out afterwards, except for a sanitized response that the human can verify.

There might be similar safeguards for posting to external services, which might require direct confirmation or be performed by fresh subagents with sanitized, human-checked prompts and contexts.
by bdhcuidbebe | 2026-02-21 10:49:08+00:00
> But how do they bypass the paywall?

I’m guessing by using a residential botnet and using existing credentials by unknowingly ”victims” by automating their browsers.

> Otherwise, the saved page would contain information about the logged-in user.

If you read this article, theres plenty of evidence they are manipulating the scraped data.

But I’m just speculating here…
by maccard | 2026-02-21 10:49:09+00:00
I work in games, and we do commit directly to main. On a smaller team you can get away with pre submit review, post submit checks. On a bigger team you need pre submit checks but honestly the point where you need this is much much later than you think. One of my previous projects had 100+ people committing directly to main with no pre submit checks and jt broke once or twice a day. The builds took longer than that to go through so you just always sync to “last known good”
by sergiomattei | 2026-02-21 10:50:01+00:00
Papers like these are much needed bucket of ice water. We antropomorphize these systems too much.

Skimming through conclusions and results, the authors conclude that LLMs exhibit failures across many axes we'd find to be demonstrative of AGI. Moral reasoning, simple things like counting that a toddler can do, etc. They're just not human and you can reasonably hypothesize most of these failures stem from their nature as next-token predictors that happen to usually do what you want.

So. If you've got OpenClaw running and thinking you've got Jarvis from Iron Man, this is probably a good read to ground yourself.

Note there's a GitHub repo compiling these failures from the authors: https://github.com/Peiyang-Song/Awesome-LLM-Reasoning-Failur...
by codethief | 2026-02-21 10:50:05+00:00
That's a good point. Though I wouldn't say text as a medium is the critical factor, it's that more communication is taking place in the open (over social media) and being recorded for everyone to see.

However, I don't see how this would imply the law that's been in place for 150 years would suddenly be bad. In fact, one might argue that precisely because so much communication is happening in public now, more regulation is needed.
by Rochus | 2026-02-21 10:50:35+00:00
Interesting. It's essentially the same idea as in this article: https://substack.com/home/post/p-184486153. In both scenarios, the human is relieved of the burden of writing complex formal syntax (whether Event-B or Lean 4). The human specifies intent and constraints in natural language, while the LLM handles the work of formalization and satisfying the proof engine.

But Lean 4 is significantly more rigid, granular, and foundational than Event-B, and they handle concepts like undefined areas and contradictions very differently. While both are "formal methods," they were built by different communities for different purposes: Lean is a pure mathematician's tool, while Event-B is a systems engineer's tool. Event-B is much more flexible, allowing an engineer (or the LLM) to sketch the vague, undefined contours of a system and gradually tighten the logical constraints through refinement.

LLMs are inherently statistical interpolators. They operate beautifully in an Open World (where missing information is just "unknown" and can be guessed or left vague) and they use Non-Monotonic Reasoning (where new information can invalidate previous conclusions). Lean 4 operates strictly on the Closed World Assumption (CWA) and is brutally Monotonic. This is why using Lean to model things humans care about (business logic, user interfaces, physical environments, dynamic regulations) quickly hits a dead end. The physical world is full of exceptions, missing data, and contradictions. Lean 4 is essentially a return to the rigid, brittle approach of the 1980s expert systems. Event-B (or similar methods) provides the logical guardrails, but critically, it tolerates under-specification. It doesn't force the LLM to solve the Frame Problem or explicitly define the whole universe. It just checks the specific boundaries the human cares about.
by JumpCrisscross | 2026-02-21 10:50:35+00:00
> not enough people speak about the normalization of the global surveillance machine, with Big Brother waiting around the corner

Everyone online is constantly talking about it. The truth is for most people it's fine.

Some folks are upset by it. But we by and large tend to just solve the problem at the smallest possible scale and then mollify ourselbves with whining. (I don't have social media. I don't have cameras in or around my home. I've worked on privacy legislation, but honestly nobody called their representatives and so nothing much happened. I no longer really bring up privacy issues when I speak to my electeds because I haven't seen evidence that nihilism has passed.)
Perplexity Pro promo subscription suspended without explanation?
by aanno | 2026-02-21 10:50:36+00:00
Received a legitimate 1-year voucher through a Tier-1 ISP partner. Account suspended mid-term, citing a ToS violation with no details given and explicitly no appeal process. Support response: "our decision is final and cannot be re-reviewed."
Interesting detail: suspension cited Section 10.3 of their ToS, but the official German localization numbers the same termination clause as Section 11.3. Perplexity publishes both versions themselves.
Curious if this is a pattern with promotional subscriptions.
by troupo | 2026-02-21 10:50:58+00:00
There are companies that still use jQuery, or Angular, or Ember, or vanilla JS, or Blazor, or...

Just because tech exists and is usable doesn't mean it doesn't have a list of issues and footguns a mile long, some of which are explicitly recognized by the Web Components Working Group. And which still need 20+ various specs to paper over.
by Joeboy | 2026-02-21 10:51:36+00:00
Yeah I rarely post, but I mostly look at my "friends" feed and it has, well, stuff posted by my Facebook friends (the ones I haven't muted, anyway).

And the default feed isn't that bad. The first three posts I see right now are:

* Old friend posting details of an event commemorating somebody (vaguely) in our social circles

* Weird thing that after googling seems to be something to do with Harry Potter?

* Mildly amusing post from The Onion

I certainly see stuff that's "worse" than that sometimes, like cringey AI posts where rock stars plaintively ask me to like their posts or culture war stuff that sadly is probably representative of things I've previously clicked on. But overall it's not really the AI slop / far right grifter hellscape I see it advertised as.
by NoboruWataya | 2026-02-21 10:51:47+00:00
I'm having this problem right now, trying to plan some nice long walks out of the city but it's been raining a lot lately. I'd love some kind of map of flooding/muddy conditions, but I don't think it would be feasible without a massive effort (as whether an area is prone to flooding or turning into a mudbath after rain depends on a lot of factors).
by 9dev | 2026-02-21 10:51:57+00:00
> It has nothing to do with being publicly traded.

It is, in most cases. Tell me about a startup that started off as an Aktiengesellschaft as opposed to a GmbH? Why would you even want to put 50k in instead of 25k, deal with all the governance overhead and reporting duties? It makes no sense at all, and during all the VC conversations I had, never once was a GmbH mentioned as problematic.

> Irrelevant.

It's not to the claim that you cannot found a company in Germany without putting down a significant amount of money and a notary. You just moved the goalposts.
by mft_ | 2026-02-21 10:53:17+00:00
It looks awful and undiscoverable on a standard Mint/Cinnamon install.

Anyway, the point is surely that if LibreOffice really wants to attract users from Microsoft Office, then it should do everything possible to optimise that transition?

Offering the option of a UI mimicking the familiar MS Office layout is not a difficult engineering problem. And if it makes users significantly more likely to switch, it should be a high priority to implement.

Honestly, at this stage, thinking of Gimp, FreeCAD, LibreOffice, and Blender, it’s as though there’s a weird group psychology deliberately against offering even decent (let along best-in-class) UIs in the open source world. These are all apps with excellent fundamental underlying engines/tech which are handicapped hugely by their UI/UX. (Yes I know some of these have improved in recent years, but only after far longer without improvements.)
by dvratil | 2026-02-21 10:53:55+00:00
I used to have a git post-checkout hook that set the repo identity based on the repo origin url [0] on checkout - maybe there's some post-clone hook these days, but 10 years ago when I wrote it there was only post-checkout hook.

[0] https://www.dvratil.cz/2015/12/git-trick-%23628-automaticall...
by nalekberov | 2026-02-21 10:54:05+00:00
You can verify yourself using company email address - maybe I am being naive to think that it’s much safer, but it’s way better than handing over your ID data.

I never understand why people supply too much info about themselves for small gains.

People at LinkedIn wants you to believe that your career is safe if you play by their games, but ironically they are one of the main reasons why companies nowadays are comfortable with hiring and firing fast.
by donatj | 2026-02-21 10:54:32+00:00
My Facebook is bad, but I still see a bunch of posts by friends. Instagram on the other hand went from a stream of artsy photos my friends posted of their vacations to a literal river of AI generated garbage.

Until about a year ago I really liked Instagram because it had been the last bastion of content by friends.

Now my feed goes

- maybe one post from friends if I am lucky
- 1-2 posts from content creators or local stores I like but don't follow
- endless stream of rage bait / slop / thirst traps

I just don't feel compelled to even open instagram anymore.
by barrkel | 2026-02-21 10:54:49+00:00
I'd much rather reduce the risk of mutation to the trunk, by having small easily reviewable commits direct to trunk.

It's less about reviewing commits from a year ago, than making change low-risk today. And small commits can easily be rolled back. The bigger the commit, the more likely rollback will be entangled.

It better to have partial features committed and in production and gated behind a feature flag, than risk living in some long-lived branch.
by summarity | 2026-02-21 10:55:39+00:00
Heyo, I'm the Product Director for detection & remediation engines, including CodeQL.

I would love to hear what kind of local experience you're looking for and where CodeQL isn't working well today.

As a general overview:

The CodeQL CLI is developed as an open-source project and can run CodeQL basically anywhere. The engine is free to use for all open-source projects, and free for all security researchers.

The CLI is available as release downloads, in homebrew, and as part of many deployment frameworks: https://github.com/advanced-security/awesome-codeql?tab=read...

Results are stored in standard formats and can be viewed and processed by any SARIF-compatible tool. We provide tools to run CodeQL against thousands of open-source repos for security research.

The repo linked above points to dozens of other useful projects (both from GitHub and the community around CodeQL).
by alecco | 2026-02-21 10:55:53+00:00
I just tried this: browse YouTube with incognito and watching 3 engineering vids only (Veritasium, Real Engineering, and Practical Engineering).

The home page shorts are about 50% thirst traps. There is creepy stuff, click-bait, and American politics/news (for and against Trump).

The worst one is a short "this is why ram costs $900" by "discord memes" showing a young girl with revealing clothing. Almost 1 million views.

I closed my YouTube account years ago because it was just pissing me off.
by runeks | 2026-02-21 10:56:30+00:00
> Taalas’ silicon Llama achieves 17K tokens/sec per user, nearly 10X faster than the current state of the art, while costing 20X less to build, and consuming 10X less power.

Am I reading this right: 10x faster and 10x less power, ie. 100x more power efficient?
by VorpalWay | 2026-02-21 10:57:21+00:00
Why? You can use an o-ring around the seal and screws to press it together. Even simpler: a water bottle like you might bring to the gym or while hiking is water proof, without needing glue. It is a solved problem. But the solution adds tens of eurocents to the cost of the phone, so the manufacturers won't do it unless they are forced to.
by cryptoz | 2026-02-21 10:57:25+00:00
> Why do you collect any data??

There are like, billions of internet-connected barometers in the world that are not used in weather models. I don’t know if Acme has any of that in mind, but there is plenty of good reason for a weather app to collect data from phones. I know @counters may disagree with me, but I believe there are opportunities to improve short term forecast accuracy using data collected from phones.

Also, pretty much every day, all the apps and all the sites will tell me the incorrect current conditions at my location, much less the forecast. It’s 2026 damnit. Why doesn’t my phone know what the weather is outside right now?

I haven’t got the app yet, but I plan on it (gotta upgrade iOS first I think). Acme seems to have a lot of ideas I agree with, so, definitely following this.

One more thing. Weather apps have not been “solved”. Not even close. They all suck, there’s billions in untapped opportunity, and a stale existing market of bad solutions. People die all the time from severe weather. There is so much more work to be done in forecast accuracy and communication.
by pingou | 2026-02-21 10:57:51+00:00
But in the article they talk about manipulating users devices to do a DDOS, not scrape websites. And the user going to the archive website is probably not gonna have a subscription, and anyway I'm not sure that simply visiting archive.today will make it able to exfiltrate much information from any other third party website since cookies will not be shared.

I guess if they can control a residential botnet more extensively they would be able to do that, but it would still be difficult to remove login information from the page, the fact that they manipulated the scraped data for totally unrelated reasons a few times proves nothing in my opinion.
by defrost | 2026-02-21 10:58:36+00:00
Read again:

The dream holiday ended abruptly on Friday 26 September, as Karen and Bill were trying to leave the US. When they crossed the border, Canadian officials told them they didn’t have the correct paperwork to bring the car with them. They were turned back to Montana on the American side – and to US border control officials. Bill’s US visa had expired; Karen’s had not.

and

Karen was incarcerated for a total of six weeks – even though she had been travelling with a valid visa.

Not her husbands. Her tourist visa.

> But I get it, you are into outrage culture

Read again: https://news.ycombinator.com/newsguidelines.html

Do better.
by thiht | 2026-02-21 10:58:39+00:00
Maybe the standard practice sucks. No matter how you turn it around, it does sound like blackmail. Just because you disclose a vulnerability to an org doesn’t mean you have any right or legitimacy to impose a deadline on them, you’re not their boss. This is some vigilante shit and it has not justification whatsoever. Report to the org, report to the authorities as needed and move on.
by skydhash | 2026-02-21 10:59:00+00:00
If you work with a ticket system, squash-merge gives you the same granularity, where a commit would refer to a single ticket.

A ticket should be atomic describing a single change request. PR in this case are the working room. It can be as messy or as clean as you want. But the goal is to produce a patch that introduces one change. Because if you would rebase -i at the end, you would have a single commit too in the PR.
by cedws | 2026-02-21 10:59:24+00:00
I don’t know why the industry collectively accepted these security scanners (code + containers) that don’t even do the most basic of static analysis to see if the vulnerable code is actually reachable. Companies are breaking their backs trying to maintain a constant zero vulnerabilities in their container images when 99% of the CVEs don’t actually affect them anyway. The kicker is that updating the dependencies probably just introduces new CVEs to be discovered later down the line because most software does not backport fixes.
by gzread | 2026-02-21 10:59:26+00:00
Section 230 being repealed doesn't mean that any moderation will be treated as publication. The ambient assumptions have changed a lot in the past 30 years. Now nobody would think that removing spam makes you liable as a publisher.

Algorithmic feeds are, prima facie, not moderation, not user-created content and do not fall under the purview of section 230.

We all know why they're really doing it, though.