MurphyA/hacker-news huggingface dataset:
by PLG88 | 2026-02-02 09:24:48+00:00
That’s a fair framing, with one important distinction.

Overlay ACLs give you network-scoped microsegmentation, not service-scoped Zero Trust (as intended in NIST 800-207). You’re limiting which IPs/ports can talk after a node is attached, not deciding whether a service path exists at all per identity and per session.

The crypto isn’t the issue - WireGuard keys are strong. The issue is scope. A node identity that grants network reachability is different from a capability-scoped identity that creates only explicit service connectivity. NIST also warns that IP-based enforcement tends to reintroduce ambient trust once a device is attached. In that model, lateral movement is reduced, not eliminated.

A simple litmus test:
- If authenticating gives you an IP and routes, you’ve built network trust with segmentation.
- If authenticating only creates explicit service paths, you’ve built Zero Trust.

Mapping this to Wireguard and overlays, I’d say:
- WireGuard + identity + ACLs = good overlay microsegmentation
- Identity-first connectivity (no IP reachability, no inbound listeners) = Zero Trust by construction

If you adopt the latter, the former becomes unnecessary for Zero Trust — because identity creates connectivity directly instead of attaching nodes to a network. Bringing it back to the topic, microsegmentation manages risk inside a network. Identity-first connectivity removes the network from the trust model altogether.
by poutrathor | 2026-02-02 09:24:58+00:00
I want to nitpick the point here : "And Office suite wise, it took Google about 15 years of pouring money into Google Docs to be almost as good as the MS offering"

From my point of view, it's more :
"Google screwed up their online, instantaneous multi-user tool so bad that Microsoft had the time to pour billions into Office-Online-365-whatever-name and now you have Word & Excel in the browser and Google lost their edge".

Without any knowledge of the matter, just looking from outside, Google had the money and the talent to get there but not the focus and the drive.

Silly example : Coloring a text in "Google Docs": the icon is black and white. You can't make that up. Impossible to find it every time I need it and I am using it for 2 months now. Every little detail is like that, showing lack of care for the users.
Show HN: Map Frame – Custom map posters for $1 (not $50)
by sylvester_aswin | 2026-02-02 09:25:01+00:00
I built Map Frame because I wanted a minimalist map poster of my hometown. Mapiful wanted $50 for a PNG. That felt absurd.

So I made my own.

How it works:
- Search any location on Earth
- Download 4K PNG (3600×4800px)
- $1 per poster, first one free

Tech: Next.js, OpenStreetMap data, custom rendering pipeline.

No AI. No GPT. Just coordinates and clean design.

Happy to answer questions about the build, pricing, or anything else.
by j16sdiz | 2026-02-02 09:25:11+00:00
Blame the long and confusing language in spec:

> For an operation with quiet NaN inputs, other than maximum and minimum operations, if a floating-point result is to be delivered the result shall be a quiet NaN which should be one of the input NaNs.

The same document say:

> shall -- indicates mandatory requirements strictly to be followed in order to conform to the standard and from which no deviation is permitted (“shall” means “is required to”)

> should -- indicates that among several possibilities, one is recommended as particularly suitable, without mentioning or excluding others; or that a certain course of action is preferred but not necessarily required; or that (in the negative form) a certain course of action is deprecated but not prohibited (“should” means “is recommended to”)

i.e. It required to be a quiet NaN, and recommended to use one of the input NaN.
by imtringued | 2026-02-02 09:25:18+00:00
I don't know if you notice what you're doing, but you're turning a low stakes / no confrontation situation into a high stakes / confrontational situation for no discernible benefit.

This type of self destructive behavior may seem worthwhile in the moment, but in the long run it doesn't bring any benefits, because you have to fight the people you're declaring war against and if the list of enemies is long enough, you're almost certainly guaranteed to lose against one of them.
by safety1st | 2026-02-02 09:25:47+00:00
Well the second group in your taxonomy are very unserious, I mean that's fine, it's OK to use an AI tool for vibing and self-amusement, there will be an entire multi-billion dollar entertainment industry which will grow up around that. In my personal experience, decisionmakers who fell into this camp and were frothing at the mouth about making serious business decisions this way are already starting to get a reality check.

From my perspective the distinction is more on the supply side and we have two generations of AI tools. The first generation was simply talking to a chatbot in a web UI and it's still got its uses, you chat and build up a context with it, it's relying heavily on its training data, maybe it's reading one file.

The second generation leans into RAG and agentic capabilities (if you can glob and grep or otherwise run a search, congrats you have v1 of your RAG strategy). This is where Gemini actually scans all the docs in our Google Workspace and produces a proposal similar to ones we've written before. (Do we even need document templates anymore?) Or where you start a new programming project and Claude can write all the boilerplate, deploy and set up a barebones test suite within a couple of minutes. There's no doubt that these types of tools give us new capabilities and in some cases save a lot more time than just babbling into chatgpt.com.

I think this accounts for a lot of differences in terms of reported productivity by the sane users. I was way less enthusiastic about AI productivity gains before I discovered the "gen 2" applications.
by wjholden | 2026-02-02 09:26:26+00:00
I remember a colleague jumping through hoops trying to get Python installed on an enterprise computer. We never did get to a yes and resorted to using PowerShell instead. The policy constraints at enterprises that this author describes are very real and very harmful.

Perhaps the wildest thing to me is how you'll have senior leaders in a company talking about innovation, but their middle managers actively undermine change out of fear of liability. So many enterprise IT employees are really just trying to avoid punishment that their organization cannot try new things without substantial top-down efforts to accept risk.
by amadeuspagel | 2026-02-02 09:26:52+00:00
When I visited London for the first time (from germany) I was impressed by how you can pay for the tube by swiping your credit card at the entry and exit. It's not just a great experience for the rider, but it also gives the transit agency the resources and the incentive to improve. A new line is not a question of politics, it's just profitable.
by veunes | 2026-02-02 09:27:50+00:00
The zeroize after exec feature sounds good, but what is the threat model in an agent context? If the agent can run printenv in the first millisecond and exfiltrate it (if net is allowed), zeroizing won't help

It seems egress filtering (allowlists) is more critical for agents than memory protection. If I allow an agent to run npm install, I'm opening a network Pandora's box, and Landlock (until ABI v4) offers pretty limited control there
by g-b-r | 2026-02-02 09:28:53+00:00
That's

However much the code is hidden and obfuscated, some parts of the source code are going to be looked upon.

For a binary, none, ever, except in the extremely rare case that someone disassembles and analyzes one version of it.

The fact that open-source doesn't coincide with security doesn't mean that it isn't beneficial to security.
by wartijn_ | 2026-02-02 09:30:25+00:00
Wouldn’t that make Scrabble only harder and more annoying to play? With that limitation you’ll get situations where you play a perfectly valid word, but it gets rejected because it’s not in the list of approved words. To get good at that version of the game, you’ll have to study the Scrabble word list instead of the dictionary.

With Wordle the limitation is only put on the words the game generates as answers. You can use obscure words to guess, they just won’t be the answer.
by 1718627440 | 2026-02-02 09:30:35+00:00
> I’ve noticed that most physical scientific and graphing calculators are easily outdone in terms of performance, capability and ease of use by the likes of Desmos and the default calculators on OS’es like the iOS, Android, and Windows.

Citation needed. They are pretty clunky, unless you have a numpad typing on them takes way longer. Graphing and fast access to mathematical functions is way worse.

I mean I do substituted my calculator with the computer, but the replacement is Python and GeoGebra, not the built in calculator. And the reason is mostly convenience of not replacing batteries. I do use the standalone calculator while the batteries are full.
by ilja-nevo | 2026-02-02 09:30:36+00:00
We all "love" microservices, allegedly. But you know what isn't fun? Realizing you need to bump a dependency, run a build, git pull and create PRs across 15 different repositories at the same time. I got tired of typing those boilerplate loops. I wanted a tool that does one thing well: runs a command in every directory, fast. So I built in-cli. It’s a zero-dependency CLI (pure bash) that acts as a force multiplier for your shell.

If you're managing a monorepo or a folder full of microservices, stop writing throwaway scripts to manage them. Check it out on GitHub, and let me know if it saves you a few keystrokes (and your sanity).
by team-agentguard | 2026-02-02 09:31:39+00:00
Depends on your stage, but here's what I learned:

I built AgentGuard (AI security SDK) in 3 weeks with "move fast"
mentality. Shipped to npm/PyPI with minimal tests. Got first users.

Then reality hit:
- Bug reports from production
- Can't add features without breaking things
- Spending more time fixing than building

Spent 2 weeks refactoring:
- Added 500+ tests
- Proper TypeScript types
- Clean architecture

Result: 10x faster development now. New features in hours, not days.

My take: Code quality is an investment. Skip it early to validate.
But once you have users, pay the debt fast. The interest compounds
quickly.
by treetalker | 2026-02-02 09:31:43+00:00
Speaking as a user, and offering my own preferences / process FWIW:

My goal is to simplify and have as few apps as possible. If I download a new app, it's always on probation. It needs to reduce my cognitive load, save my time, make my life appreciably better. If it doesn't, or if the juice isn't worth the squeeze, I delete it.

Regardless, I immediately default to no notifications. Don't ask me to turn on notifications: I'm not an idiot, so I figure the app has some notification mechanism if I want it; and I figure I can activate it in a place called Settings; so I'll handle it myself if I decide to later, thanks. The insult to my intelligence just wasted seconds of my life and limited attention and mental bandwidth, none of which I'll ever get back — so, strike 1!

I prefer to poll. If polling is not enough, I'll set up scheduled notifications. If that's not enough (maybe the app is Messages or one that alerts me that my house is burning or my children have been kidnapped — who knows!) then I'll turn on notifications. But even on Messages — perhaps the only app I want to hear go ding — I mute notifications for a lot of contacts/threads.

So if the app isn't helpful; or stops being helpful; or becomes a burden, through annoying notifications or otherwise — sayonara.
by vintermann | 2026-02-02 09:31:49+00:00
Laos is a pretty odd state. I looked up their official news site once expecting to find North Korea style propaganda, but it was instead surprisingly straightforward about a lot of day to day problems.
I also had some contact many years ago with their one Linux/Free Software enthusiast.
My impression is that it's a fairly weak state, and the main reason the communists are technically still in charge is that nobody really wants the job of ruling Laos particularly much.
by alt227 | 2026-02-02 09:31:56+00:00
I am not trying to push conspiracy theories here.

But IF its possible for law enforcement to ping your phone when its on standby, dont you think its possible that it can be pinged whilst on airplane mode too?

If you are using it on wifi its game over anyway, hard internet connections are easy to track by law enforcement via ip and ISP. Even if you use a VPN your device is still connected to the wifi and can be pinged.

Not sure why people here are thinking they are more clever than than the smartphone makers.
by fauigerzigerk | 2026-02-02 09:32:30+00:00
>What I've come to realise is that the power of having a bash sandbox with a programming language and API access to systems, combined with an agentic harness, results in outrageously good results for non technical users. It can effectively replace nearly every standard productivity app out there - both classic Microsoft Office style ones - and also web apps.

I very much doubt that tinkering with a non-repeatable, probabilistic process is how most non-technical users will routinely use software.

I can imagine power users taking this approach to _create_ or extend productivity tools for themselves and others, just like they have been doing with Excel for decades. It will not _replace_ productivity tools for most non-technical users.
by palata | 2026-02-02 09:32:31+00:00
> Businesses don’t do promotions at senior levels because you “deserve” it. They promote those who have the highest potential to deliver outsized impact and value.

I guess it will sound like a nitpick, but to me it matters a lot:

They promote those they believe have the highest potential to bring value.

The whole thing is that the person who promotes you is a human in a dominant position. You can't change their mind about what they believe is a good reason to promote an employee, because they are in a position to feel superior.

If you want a promotion, you have to do whatever those with that power want to see in order to give you a promotion. If that involves bringing doughnuts every Monday morning, you have to do it.

Luckily, cargo cult means that those people probably all read the same kind of books, so a valid proxy may be to just read those books and try to fit in this completely arbitrary world. Coaches are people who decided that instead of reading those books to try and get a promotion themselves, they would just make a business out of reading those books and selling you that knowledge.
by youngtaff | 2026-02-02 09:34:20+00:00
Even in the South East, the UK isn’t that densely populated — apparently golf courses take up more space than housing (excluding roads)

HS2 benefits pretty my everyone along it’s route path through increases local services as capacity is released from the current lines

Midland Connect have a good overview of what it enables them to do – https://www.midlandsconnect.uk/media/1602/hs2-released-capac...

There’s also a document somewhere that covers how HS2 increases short distance services from Euston somewhere

Local rail transport should benefit hugely from HS2
by viking123 | 2026-02-02 09:34:40+00:00
We are decades if not hundreds of years away from any real AGI. The AGI is for many tech people what God is for most people in the world, it's kind of a feel-good thing to believe that in their lifetime they can essentially have this intelligence that can be cloned unlimited times and essentially solve any problem thrown at it and liberate them from aging and death.

I think one day this kind of system will probably exist in some form, I don't see any fundamental reason why not but to believe fraudsters like Amodei and Altman telling you that in 6 months world will possibly end and the AIs will take over, it's just nonsense fed to boomer investors who have 0 clue.

Many crypto scammers have pivoted to AI because there are new useful idiots to scam now that crypto is not doing too hot.

Frankly the whole world is just scam after scam nowadays, they noticed that the Elon Musk strategy of continuously promising something "the next year" actually works so they are all doing it stringing people along.
by bumahkib7 | 2026-02-02 09:35:40+00:00
I built RMA because I was tired of waiting 5–20 minutes for Semgrep/CodeQL/SonarQube on large monorepos.

It's a Rust-native CLI that scans ~100k LOC in under 0.5 seconds and now has:

- Cross-file taint propagation (input in handler → util → sink)
- String concatenation & template taint (real SQLi, XSS, command injection, path traversal)
- Basic type inference + nullability (null dereference detection)
- Typestate/protocol rules (file/DB/lock/crypto leaks, use-after-close, double-lock, etc.)
- Interactive TUI viewer (navigate findings, filter severity, search, preview code snippets)
- SARIF output → GitHub Security tab
- Dashboard with vuln tables, fix recommendations, health scores (in progress)

Repo: https://github.com/bumahkib7/rust-monorepo-analyzer
Latest release: https://github.com/bumahkib7/rust-monorepo-analyzer/releases...

Try it:
cargo install rma
rma scan . --profile strict --ai
rma scan . --interactive # launches the TUI

Still early — false positives exist in generated/test code (tunable via rma.toml).
Feedback very welcome: too noisy? Missing rules? Happy to hear it.
by dgoldstein0 | 2026-02-02 09:35:46+00:00
I built something like this that we use both for migrations and disallowing new instances of bad patterns for my mid sized tech company and maintain it. Ours is basically a configuration layer, a metrics script which primarily uses ripgrep to search for matches of configured regexes, a linter that uses the same configuration and shows any configured lint messages on the matches, a CI job that asserts that the matches found are only in the allowlisted files for each metric, and a website that displays the latest data, shows graphs of the metrics over time, and integrates with our ownership system to show reports for each team & the breakdown across teams. The website also has the ability to send emails and slack messages to teams involved in each migration, and when the configuration for a migration includes a prompt, can start a job for an agent to attempt to fix the problem and create a pr.
by fragmede | 2026-02-02 09:35:56+00:00
False dichotomy is one of the original sins. The two groups as advertised aren't all that's out there. Most people are interested in results. How we get those results is part of the journey of getting results, and sometimes it's about the journey not the destination. I care very much about the results of my biopsy or my flight, I don't know much about how we get there, I want to know if I have cancer, and that my plane didn't crash. I hope that doesn't put me on the B ark that gets sent into the sun.
by hdjrudni | 2026-02-02 09:36:40+00:00
Right, but then you're providing tangible value to the customer and thus it's warranted to charge again.

The fairest thing to do is when a customer buys the software, they're entitled to that exact version forever. Or maybe 1 year of updates and bug fixes if you're feeling nice. If they want the next version that supports the next OS, it's fair to charge some more.

This what IntelliJ does. When I buy their IDE I can use it forever, and then they offer discounts for renewing. Pricing seems reasonable even though I'm currently generating $0 from my software development so I keep paying.
by kajolshah_bt | 2026-02-02 09:36:50+00:00
This is really helpful. That matches what I’ve seen too, but you’ve explained it more clearly than most product docs ever do.

The part that stands out to me is how default notification prompts feel like an insult to intelligence rather than a value exchange. A lot of teams treat “turn on notifications” as a growth lever, when for users like you it’s already strike one.

Have you ever kept an app around without notifications because the pull was strong enough on its own? Or is the bar now basically “silent by default, prove value first?”

Trying to understand whether mute is more about notification behavior specifically or a broader signal that the app hasn’t earned ongoing attention yet.
by sevenzero | 2026-02-02 09:37:51+00:00
I agree and I am far from being a senior engineer. I'm only in the market since a few years and started out just before the whole LLM stuff started to pick up. So I have been grinding a lot (2nd job I've learned, am in tech since ~2020) only to be confronted with permanent existential fear of having to possibly learn a 3rd job (which takes 3 years of full time work for neglectable pay in my country). I dont want to start from zero again and I am tired of corporations that are shitting out money to be cheap on their employees. Starting from zero is never fun, going back into debt is never fun and having to leave a job/career you like also is never fun. I'm 30 now and only ever have been making (noteworthy, still below median) money since 1.5 years now. I cant afford starting anew and there is little I can do about it which is extremely frustrating.
by kristopolous | 2026-02-02 09:39:29+00:00
I call it the day50 problem, coined that about a year ago. I've been building tools to address it since then. Quit the dayjob 7 months ago and have been doing it full time since

https://github.com/day50-dev/

I have been meaning to put up a blog ...

Essentially there's a delta between what the human does and the computer produces. In a classic compiler setting this is a known, stable quantity throughout the life-cycle of development.

However, in the world of AI coding this distance increases.

There's various barriers that have labels like "code debt" where the line can cross. There's three mitigations now. Start the lines closer together (PRD is the current en vogue method), push out the frontier of how many shits someone gives (this is the TDD agent method), try to bend the curve so it doesn't fly out so much (this is the coworker/colleague method).

Unfortunately I'm just a one-man show so the fact that I was ahead and have working models to explain this has no rewards because you know, good software is hard...

I've explained this in person at SF events (probably about 40-50 times) so much though that someone reading this might have actually heard it from me...

If that's the case, hi, here it is again.
by joe_mamba | 2026-02-02 09:39:57+00:00
Same. I go to technical or other forums in order to pursue hobbies of interest and escape the political shitshow of the real world, not be reminded of it every step of the way. I don't want to be bombarded with their opinions on the matter, even if they were to align with my own. Virtue signaling becomes a slippery slope that only induces more division, anxiety and fatigue over those issues, while not actually helping with solving them in any way.
by Pay08 | 2026-02-02 09:42:01+00:00
I don't know if the author is reading this, but the issues with the nvidia driver was likely because he didn't use an LTS kernel. The nonguix README says that the nvidia driver is only compiled for the current LTS kernel (i.e. the linux-lts package) but it's easy to miss. BTW, there's a list of mirrors for the substitute servers at https://libreplanet.org/wiki/Group:Guix/Mirrors, they tend to be way faster.
by intended | 2026-02-02 09:42:03+00:00
I heartily recommend people volunteer for moderation. There’s tons of subs that need help, and the more diversity of voices in conversations like this, the better.

Modding is a shit show, and being on the other side can be quite the experience.

The more people who can chime in, the better as a society we can figure out what needs to be done.

Right now it’s rough for users, and insane for mods.