MurphyA/hacker-news huggingface dataset:
by rl3 | 2026-02-09 01:15:26+00:00
>No, they are not. Doesn’t matter how many LoC; it only take 1 LoC to introduce a vulnerability.

So according to you, the concept of attack surface doesn't exist. A 100MB binary is equivalent in risk to a 1KB binary. Got it.

If both are highly-audited, their risk is equal despite their size and protocol complexity. Got it.

>...its false to state that one piece of software has a “principle risk” of vulnerabilities that another piece does not.

That's like the third or fourth time you've scare-quoted the word principle. You're aware that principle and principal are two different words with different meanings?

The word I used, principal, in that context means the foremost or primary risk.

Anyways, I'm just telling you how major corporations think about it. Their underlying rationale is exactly what I've explained thus far, and hence why it's best practice.

Keep shooting the messenger I guess.
by zhyan7109 | 2026-02-09 01:15:29+00:00
Good call out! This book was definitely useful in terms of thinking about specialization before testing the market. There was even a sequel to it I believe.

However, the general audience for "Built to Sell" is for SMBs and does not cater towards the venture-backed technology startups here in the valley (who hope for a strategic acquisition instead of a ebidta multiple).
by Barrin92 | 2026-02-09 01:15:57+00:00
>What's the plan to avoid a Bluesky-like bubble from forming around Vouch projects?

I don't really see the issue, 'bubble', is a buzzword for what we used to call a community. You want to shrink viral online platforms to health, which is to say to a sustainable size of trusted and high quality contributors. Unqualified growth is the logic of both cancer and for-profit social media platforms, not of a functioning community of human beings.

Bluesky and Mastodon are a significantly more pleasant experience than Twitter or the Youtube comment section exactly because they turn most people away. If I were to manage a programming project, give me ten reliably contributors rather than a horde of slop programmers.
by echelon | 2026-02-09 01:16:43+00:00
It's coding at 10-20x speed, but tangibly this is at 1.5-2x the overall productivity. The coding speed up doesn't translate completely to overall velocity yet.

I am beginning to build a high degree of trust in the code Claude emits. I'm having to step in with corrections less and less, and it's single shotting entire modules 500-1k LOC, multiple files touched, without any trouble.

It can understand how frontend API translates to middleware, internal API service calls, and database queries (with a high degree of schema understanding, including joins).

(This is in a Rust/Actix/Sqlx/Typescript/nx monorepo, fwiw.)
by gnachman | 2026-02-09 01:17:23+00:00
Here’s mine

https://apps.apple.com/us/app/snortfolio/id6755617457

30kloc client and server combined. I built this as an experiment in building an app without reading any of the code. Even ops is done by claude code. It has some minor bugs but I’ve been using it for months and it gets the job done. It would not have existed at all if I had to write it by hand.
by hunterpayne | 2026-02-09 01:17:53+00:00
The main benefits are that Sodium is abundant, cheap and stores 30x the energy of Lithium per unit mass. The draw back is that when exposed to water it explodes with 30x the energy of Lithium. The other drawback is that it bursts into flame when exposed to air.

Think of it this way, Sodium metal is abundant and cheap with 30x the energy storage (and energy transfer) of other solutions yet nobody has used it in almost any product ever (including as a coolant). The volatility of Sodium is why. Unless they have a solution to this, then I would be shorting whoever is insuring these batteries.
by kylehotchkiss | 2026-02-09 01:19:55+00:00
Anybody tried running vscode server in this? I don’t want to run it on my macOS with no sandbox, I find the full file access in the browser to be uncomfortable. I’ve fought Colima before and ran it within there but the host/vm permissions for editing files in a projects folder were a pain.

So it’d be cool if this or a sandbox tool could help.
by colechristensen | 2026-02-09 01:19:55+00:00
I often ask for big things.

For example I'm working on some virtualization things where I want a machine to be provisioned with a few options of linux distros and BSDs. In one prompt I asked for this list to be provisioned so a certain test of ssh would complete, it worked on it for several hours and now we're doing the code review loop. At first it gave up on the BSDs and I had to poke it to actually finish with an idea it had already had, now I'm asking it to find bugs and it's highlighting many mediocre code decisions it has made. I haven't even tested it so I'm not sure if it's lying about anything working yet.
by iugtmkbdfil834 | 2026-02-09 01:20:09+00:00
Eh. Our understanding is what it has been since early 80s and late 90s, because, in reality, not that much has changed. Oh, sure, technology has moved forward and we no longer print TPS reports in triplicate, but we still have three to four layers of professional checkbox checkers at most big corporates.

And this is just stuff that is mandated by government and not a result of ever evolving bureaucracy.
by sarchertech | 2026-02-09 01:21:12+00:00
It’s hard to say. The compiler is in a state that isn’t useful for anything at all and it’s 100k lines of code for something that could probably be 10k-20k.

But even assuming it was somehow a useful piece of software that you’d want to pay for, the creator setup a test harness to use gcc as an oracle. So it has an oracle for every possible input and output. Plus there are thousands of C compilers in its training set.

If you are in a position where you are trying to reverse engineer an exact copy of something that already exists (maybe in another language) and you can’t just fork that thing then maybe a better version of this process could be useful. But that’s a very narrow use case.
by BobbyJo | 2026-02-09 01:21:59+00:00
> In a way it shows how poorly we have done over the years in general as programmers in making solved problems easily accessible instead of constantly reinventing the wheel.

I just don't think there was a great way to make solved problems accessible before LLMs. I mean, these things were on github already, and still got reimplemented over and over again.

Even high traffic libraries that solve some super common problem often have rough edges, or do something that breaks it for your specific use case. So even when the code is accessible, it doesn't always get used as much as it could.

With LLMs, you can find it, learn it, and tailor it to your needs with one tool.
by yeag123 | 2026-02-09 01:22:03+00:00
Working on either a self hosted, or self "provisioned" document extraction platform. Trying to make it as flexible as possible, so businesses

I worked with manufacturing companies, and the amount of manual document extraction and manipulation, particularly from accounting documents, was always a large burden.

The goal is upload a document → extract structured fields via LLM → generate new documents from templates. Has a dashboard, with an API, along with a webhook, very much a WIP.

https://fetchtext.io
by et1337 | 2026-02-09 01:23:03+00:00
A personal finance app called “Predictable” that takes chaotic sloshes of money and turns them into steady streams of cash. You tell it “I receive this much money weekly/monthly/on the first and fifteenth/when Mercury is in retrograde, and I have these expenses at other various intervals” and it evens everything out into a constant weekly flow of cash by, essentially, buffering. Any overflow or underflow goes to a “margin” bucket which basically tells you how much you could spend right now and still have enough for all your recurring expenses.

Currently making it just for myself but curious if anyone else would find it useful.
by alexpotato | 2026-02-09 01:24:38+00:00
I remember being in college and seeing the start of forums dedicated to a sport or hobby. That's how college paintball grew b/c first there was a forum just for college teams. Google just accelerated this as it made them easier to find. That then got eclipsed by BIG dedicated forums like PBNation.com (with a dedicated college forum) and then it went to FB.

That "if I just browse around, I'll find the nexus of what I'm into" seems to not be a thing for teenagers these days.
by noosphr | 2026-02-09 01:24:59+00:00
I would usually keep quiet and ignore post like this because they are extreme timesinks, but to give a perfect example: Waco. It happened under the other side. The official story is bunk and half the country that is supposedly anti-authoritarian cheered it on.

I don't care to have the conversation or change anyone's mind but your post is the perfect example why people in the middle disengaged from the loud minority that takes over online spaces.
by kylehotchkiss | 2026-02-09 01:25:42+00:00
Fetching every church from IRS data; using a small local Mac mini LLM to match to their Google result, fetching site and (eventually) running a data enrichment LLM pass to determine various positions, metadata, and services offered. I just really wanted to see the data in aggregate. My current match rate is 30% with qwen2.5-14b. Doing my best to avoid spending a lot of $ on the processing even if the Mac mini is slow.

Stretch goal: start transcribing sermons (most churches link to videos) and using a LLM pass to look for toxic traits. Speak truth to power about how a lot of them turn a blind eye to this political moment.

We’ll see how it goes.
by drzaiusx11 | 2026-02-09 01:25:45+00:00
Employing servants only recently fell out of favor in the years between WWI and WWII. Prior to WWI having servants was still in fashion for the wealthy. Naturally I meant paid servants. Enslaved and to some extent indentured servants obviously have little to no choice.

That said many of those employered in service industries and to some extent the gig economy have limited options and their participation is barely "voluntary" in modern capitalism.
by codezero | 2026-02-09 01:27:59+00:00
I should probably date myself, most of this wasn't true 10+ years ago. forward deployed/field, yep, Palantir has kind of owned that. Solutions Architect has definitely been cross functional for a long time, but solutions engineer is a title that I am pretty confident was post-sales first. I A/B tested the title back in 2014 between Product Analyst (candidates too junior), Support Engineer (too much IT/back office support, not enough experience w/ paying customers). Solutions Engineer hit a sweet spot and brought in the best candidates: Generalists who aren't really sure what they want to do, but with broad access to code/product/engineers and customers eventually find a speciality they like.

Because these folks are problem solvers, the title brought a reputation which is exactly why the sales folks wanted to co-opt the title. It conveyed trust and experience. When used well, it's still a good fit in pre-sales for building out POCs and delivering value, but more often than not, it's just sales engineering where they're qualing out potential customers that aren't worth the time of the sales team. Which is fine, except that this is MY title :)

To be clear, I take this a little personally as I was an early adopter of the title. It's kind of like those folks that get annoyed when you're a fan of a band that they liked before you ever heard of them, I admit it.
by Groxx | 2026-02-09 01:28:32+00:00
"some", where "some" is scaled to match the overwhelmingly unprecedented amount of money being thrown behind all this. plus all of this is about a literal astroturfing machine, capable of unprecedented scale and ability to hide, which it's extremely clearly being used for at scale elsewhere / by others.

so yeah, it wouldn't surprise me if it was well over most. I don't actually claim that it is over half here, I've run across quite a few of these kinds of people in real life as well. but it wouldn't surprise me.
by eitally | 2026-02-09 01:28:45+00:00
I think a lot of what's happening is that individuals and their in-groups are replacing social media for comms with chat apps, leaving much of the remaining social media use being either reposting crap or for opinion blasts... or in the worst case, thoughtlessly reposting other people's [extreme] opinion blasts.

One thing is true: actual, active socializing is happening in chat apps (and Discord), not FB, X, or IG.
by throwaway894345 | 2026-02-09 01:28:56+00:00
Yes, things are rapidly improving. My claim was that cold weather is a pain today. Also “living within 100 miles of a fast charger” is small comfort to those who don’t have a convenient way to charge at home.

For the record, I’ve been an EV owner for 5 years in the northern US. I still like my EV and things get better all the time, but I don’t understand the people in this thread saying that cold weather battery performance is fine.
by robot-wrangler | 2026-02-09 01:28:57+00:00
A few hops away, the non-mathematical part of this story is interesting[0] and Conway's related weird world of audio-active decay is another recurring favorite[1]. Both are even more fun with esolangs[2]. I'm sure I've heard audio-encodings of Kolakoski before, but couldn't find any with a quick search

[0] https://en.wikipedia.org/wiki/William_Kolakoski#Personal_sig...
[1] https://en.wikipedia.org/wiki/Look-and-say_sequence
[2] https://esolangs.org/wiki/Kolakoski_sequence
by krautburglar | 2026-02-09 01:29:13+00:00
From the emails I've read, Chomsky prematurely handed a big chunk of his net worth over to his children. With the new wife and the move, Noam was burning through cash at considerable speed. His kids started tightening the purse. Jeffrey Epstein came in as a financial fairy godmother to wrangle the purse strings back from Noam's kids. Given that Epstein and Maxwell were working hard for Israel, and Chomsky is a famous critic of Israeli policy, having Noam owe him one must have been a bit of a coup. Not that it would silence him, but it would at least get Chomsky to moderate his tone.

If you deal with the same people over time -- even highly intelligent ones -- you will notice the stark decline in intelligence in the later years. I didn't even like Chomsky when he had his marbles, but it's hard to get worked-up over "Old guy gets mixed-up with the wrong people and does dumb shit."

But even in 2016, even with his diminished faculties, Chomsky was not just a news-hound, but a news BEAST. This, "oh, we didn't know until 2019" is a massive load of shit.

The only HERO I've come across in these e-mails is Norman Finkelstein.
by heyitssim | 2026-02-09 01:29:16+00:00
I love making games, and I’ve been building a no-code game engine by extracting reusable components every time I ship a new game. It started as me scratching my own itch, and now it’s turning into a real platform.

Each game adds more building blocks to the editor: multiplayer, event systems, NPC behaviors, pathfinding, etc. I build a system once, and then anyone using the editor can use it in a click.
For game logic, I recently added a visual event system I’m really excited about. It’s kind of like Unreal Blueprints, but focused on 2D. You pick a trigger, wire conditions, and chain actions in a node graph [1].

Big challenge right now: most people who want to make games needs assets, and don't know how to get/make them. So I’m building a marketplace where pixel artists can upload tilesets/characters, and unlike itch.io, assets are usable directly inside the engine. No ZIP downloads or import setup, just browse and drop into your game. A preview here[2].

Also, if you want to use the editor but ship elsewhere, you can export terrain, animations, and hitboxes to Godot 4. Nothing is locked in.

The engine/editor is at https://craftmygame.com if anyone wants to poke around! And you can test a couple games here[3][4], and 1 multiplayer game I've tested IRL in a bar [5]!

[1] https://youtu.be/8fRzC2czGJc

[2] https://www.youtube.com/watch?v=hScOK_naYnk

[3] https://craftmygame.com/game/e310c6fcd8f4448f9dc67aac/r/play

[4] https://craftmygame.com/game/f977040308d84f41b615244b/r/play

[5] https://www.youtube.com/shorts/WOIUmOVvaZM
by alexpotato | 2026-02-09 01:29:31+00:00
> For example, it's possible to make hiking boots that last a lot longer than others. But if the requirement is to have it last for just 20 miles, it's better to pay less for one that won't last as long.

Excellent point which leads to one related but less commonly mentioned:

If you build a product that lasts 25 years and that's what people want, you need to price it in such a way that if the entire market buys your product, you will run out of customers (for roughly 25 years or until new customers are born). Otherwise, you have a big rush of revenue early and then it drops off a cliff.

(I'm oversimplifying here but this is partly why there is a trend to make things more disposable or have a limited lifespan).
by Gualdrapo | 2026-02-09 01:29:32+00:00
Location: Bogotá, Colombia
Remote: Yes
Willing to relocate: No
Technologies: HTML, CSS, JavaScript, SVG, TeX/ConTeXt, PHP, Jekyll, Tailwind CSS
Portfolio: https://miler.codeberg.page/
Résumé-CV: https://codeberg.org/miler/curriculum-vitae/raw/branch/main/curriculum-en.pdf
Email: Please see Portfolio or CV/Résumé
GitHub: https://github.com/acidrums4/
by gerdesj | 2026-02-09 01:30:14+00:00
Even fast LACP needs three seconds and that's on the same collision domain.

How does BGP actually detect a link is down? Keep alive default is 30s but that can be changed. If you set it to say one second, is that wise? Once a link is down, that fact will propagate at the speed of BGP and other routing protocols. Recovery will need a similar propagation.

Depending on where the link is, a second can be a "life time" these days or not. It really depends on the environment what an appropriate heart beat interval might be.

Also, given that BGP is TCP based, it might have to interact with other lower level link detection protocols.
by krackers | 2026-02-09 01:30:29+00:00
Yup, it feels weird to use LLMs to perform large scale refactors, but LLMs to meta-codegen which you then use to do the refactor works really well. The quality of the generated tool itself doesn't matter so long as it's deterministic and you can reasonably see what it's doing. It the same vein it works nicely for random one-off parsers (either DSL parsing or abstractly as screen scraping): nothing you'd be robustly confident in, but good for throwaway parsing.
by dserban | 2026-02-09 01:30:44+00:00
At some point, I needed to write a function which, given a collection of product titles, picks one that is neither the longest nor the shortest, it should pick the one which best captures the essence of the product while not being excessively verbose. For example, given the product titles below, it should pick "Portable Two-Way Translator, Handheld".

Portable Two-Way Translator, Handheld

Portable Handheld Translator

Handheld Two-Way Translator

Electronic Two-Way Portable Instant Voice Translator, 40 Languages, Handheld

Based on previous experience with centroid-based algos, the function I wrote does a first pass throwing all words from all product titles into one big bag, then computing a centroid (frequency histogram with low-frequency words removed). The second pass is to compute a cosine similarity score for each product title (its own frequency histogram against the centroid). Whichever product title is the most similar to the centroid wins.

That algo may have existed already in some academic paper somewhere, but I came up with it independently.
by mattgreenrocks | 2026-02-09 01:31:24+00:00
Yet it still fumbles even when limiting context.

Asked it to spot check a simple rate limiter I wrote in TS. Super basic algorithm: let one action through every 250ms at least, sleeping if necessary. It found bogus errors in my code 3 times because it failed to see that I was using a mutex to prevent reentrancy. This was about 12 lines of code in total.

My rubber duck debugging session was insightful only because I had to reason through the lack of understanding on its part and argue with it.
by ZguideZ | 2026-02-09 01:31:26+00:00
Collaborative storytelling has always been my passion — but the tools never quite fit.
So I made one.
https://www.w3wu.com is a free platform where creators can:
• Build shared worlds
• Establish canon and rules
• Collaborate across media
It’s been tested, used, and refined through real projects.
Now I’m inviting others in.
Create your own world.
Or help shape someone else’s.
Show HN: Running OpenClaw on Kubernetes
by serhanekici | 2026-02-09 01:32:39+00:00
Hi HN,

OpenClaw is powerful, but it is also an autonomous agent that can execute code, make network calls, and interact with external systems. Running something like that directly on your workstation or something shared felt risky to me.

Kubernetes is a good fit here because it gives you isolation by default. You can constrain resources, control network access, manage secrets properly, and limit the blast radius if something goes wrong.

I built a reproducible Helm chart that deploys OpenClaw with sensible defaults for isolation!

Would love feedback from people running AI agent workloads in Kubernetes.

Repo: https://github.com/serhanekicii/openclaw-helm
Docs: https://serhanekici.com/openclaw-helm.html
by sarchertech | 2026-02-09 01:33:54+00:00
> I’ve been wanting to develop a plastic -> silicone -> plaster -> clay mold making process for years, but it’s complex and mold making is both art and science. It would have been hundreds of hours before, with maybe 12 hours of Claude code I’m almost there (some nagging issues… maybe another hour).

That’s so nebulous and likely just plain wrong. I have some experience with silicone molds and casting silicone and other materials. I have no idea how you’d accurately estimate it would take hundreds of hours. But the mostly likely reason you’ve had results is that you just did it.

This sounds very very much like confirmation bias. “I started drinking pine needle tea and then 5 days later my cold got better!”

I use AI, it’s useful for lots of things, but this kind of anecdote is terrible evidence.
by the_biot | 2026-02-09 01:34:09+00:00
Awesome work! Enriching the disassembly with known constants and labels is great, great stuff.

As somebody else suggested, try Ghidra's decompiler. It produces very sloppy C code, but still reads faster than assembly most of the time.

Now enriching Ghidra's decompiler output to clean up the C code, that would be a neat trick, and one that Ghidra isn't doing.
Need feedback please alternative to Vanta/Conveyor because I hate subscriptions
by TaeThePharaoh | 2026-02-09 01:34:12+00:00
I run a small B2B SaaS (Ok, not really it's my mom's business but she considers me a partner in it). We just spent 3 weeks chasing a $$k enterprise deal.
At the finish line, they sent a 250-row Excel security questionnaire. It took me my entire weekend to fill out.
I looked at competitors ($5k+/year, overkill for us). Just wanted something simple: drag file, pay once, done.
Thinking about building a dead-simple utility:
Upload blank questionnaire
Upload your security docs
AI fills it out
Download completed filePay once (~$99), no subscription
No sales calls. Data gets deleted 24Hrs after you pay. No Onboarding Bullshyt.
Question for founders: Is this actually a problem worth solving? Or have you found better ways to handle these?
Also: What would make you trust AI-generated security answers enough to submit them to a buyer?
(Not trying to sell anything - genuinely trying to validate if this is a real pain point or just me complaining)
by krackers | 2026-02-09 01:34:31+00:00
There's another category (possibly a subset of 1), the implementation is novel but set of requirements is known and has a set of conformance tests so tight that the LLM can basically brute force its way to a solution. See e.g. the Claude Compiler thing. In this case it's less "search engine + translator" and more of "brute force search".