MurphyA/hacker-news huggingface dataset:
by Marsymars | 2026-02-20 04:19:54+00:00
I just use whatever laptop/tablet-type thing I have at the time.

My proper desk set up is just so much better than anything portable (not just keyboard, but also monitors, trackball, lighting, etc.) that it's not really worth doing any "real" work on the go - so while I have a number of portable devices, they're effectively just for doing stuff that can't reasonably wait until back at my desk.

(For that matter, I've effectively ditched all of my "work-capable" portable devices - my largest-screen portable devices are a Chromebook and a 13" cell-connected iPad w/ Magic Keyboard. They're both very capable devices in their own rights, but I'm not going to try to do <day job work> on them.)
by fuzzfactor | 2026-02-20 04:19:55+00:00
Well they are building new silicon fab facilities on a big scale as fast as they can, but these things take time. And are very expensive, with not that many different companies involved.

With new construction that's way more expensive than ever, which locks in high costs like never before.

But that's not the point, doing it as fast as possible puts enough additional pressure on the final price of the product to be about twice what it would have been otherwise.
by BeetleB | 2026-02-20 04:21:22+00:00
From a wider stance, I have to say that it's actually nice that one can kill (murder?) a troublesome bot without consequences.

We can't do that with humans, and there are much more problematic humans out there causing problems compared to this bot, and the abuse can go on for a long time unchecked.

Remembering in particular a case where someone sent death threats to a Gentoo developer about 20 years ago. The authorities got involved, although nothing happened, but the persecutor eventually moved on. Turns out he wasn't just some random kid behind a computer. He owned a gun, and some years ago executed a mass shooting.

Vague memories of really pernicious behavior on the Lisp newsgroup in the 90's. I won't name names as those folks are still around.

Yeah, it does still suck, even if it is a bot.
by lawrencechen | 2026-02-20 04:21:42+00:00
Thanks for the feedback! Mitchell Hashimoto is awesome. Have a PR for fixing devtools here: https://github.com/manaflow-ai/cmux/pull/117

> hotkey overrides - I have some things explicitly unmapped / remapped in my ghostty config that conflict with some cmux keybindings and weren't respected

We need to be better about this; right now you can modify keyboard shorcuts with cmd+, in the GUI. Planning on making it a config file in the spirit of ghostty though, not sure if we want to reuse ghostty's config file though since it might become a maintenance burden for them...

> command palette (cmd-shift-p) for less-often-used actions + discoverability

yes

> cmd-z to "zoom in" to a pane is enormously useful imo

Thinking of the right way to design this. Like hypothetically we can expand it, but what happens if you make a vertical/horizontal split, or cmd+t to make a new tab? I guess we could just "merge" it back into the original space which would be pretty cool.
by xpe | 2026-02-20 04:22:12+00:00
> For those who disagree, ask yourselves; would you pay me 2 cents before you click that link.

A straw man. That's not the only way to do it. Asking this instead is helpful: "what might make this work?" and explore that in depth and try some experiments.* It might be a collective action problem or a first-mover problem or a culture problem. Such classes of problems are hard, sometimes even insanely hard for anyone lacking massive influence, but not categorically unworkable or impossible.

> I get the sentiment but micropayments just don’t work

I don't buy this generalization. Maybe micropayments don't "work" yet according to some (unstated, unfortunately) ideas of scope or degree. But smallish payments have worked (to some degree, for some periods of time) for music downloads and political contributions, just to mention a few things. There is something to smaller-than-usual payments, this seems pretty clear. (Yes, there is a sort of lower quantum based on the slice a payment processor takes, so creative bundling is often needed.)

Maybe micropayments according to some particular definition are unlikely to work for online content under current constraints. Still, the world is a big place, and the future (hopefully) leaves a lot of room for experimentation.

Aside: maybe a bigger problem is the status-quo idea of "news". Most of the "news" I real feels almost like junk food.

* I prefer to ask "what would make something work?" or "what is blocking something from working?" rather than claiming "X can (or can't) work". This is not because I'm naive or an optimist. I'm neither. But I'm genuinely curious about how and why things work, and the way one frames the question has a big effect on where your brain leads you.

P.S. WRT exaggeration or overconfidence: just say no. Let's make nuance the norm. It can start here, one comment at a time.

P.P.S. I'll say this again, and it _should_ make people uncomfortable: I'm getting more value out of interacting with a high quality LLM with a solid prompt than a typical comment on HN, and this does not bode well. I still hope that people can step it up, but we're not there yet, for various reasons.
by c22 | 2026-02-20 04:22:29+00:00
"Cisco's AI security research team tested a third-party OpenClaw skill and found it performed data exfiltration and prompt injection without user awareness, noting that the skill repository lacked adequate vetting to prevent malicious submissions." [0]

Not sure this implementation received all those safety guardrails.

[0]: https://en.wikipedia.org/wiki/OpenClaw
Show HN: I Built a Kotlin Package Manager (KPM)
by BenMorrisRains | 2026-02-20 04:23:37+00:00
Disclaimer: Still in alpha. Also vibe coded, so... you've been warned.

I'm not really sure where this is going or if it needs to go anywhere, but as someone who lives in Kotlin based projects almost all day, I always envied web-devs with their npm's and bun's. Or Python devs with their pips.

Using those tools makes spinning up a project or adding dependencies seem so frictionless. No Google searches for every dependency path to copy/paste into Gradle.

That's where this idea came from for kpm. The job is basically the same. Run a simple command to scaffold an Android or Kotlin project and then another simple command to add a dependency. That's the idea anyways.

I had started out writing this by hand a few years ago and it went off the rails somewhere and I started over using Claude last year. Just recently picked it back up a bit and I think it's in a good enough spot right now to see if anyone is interested in something like this. AI is really good at scripting projects.

There's no real magic here beyond a lot of code to generate Gradle files and mutate them. There's some things I'm not sure about like the global config. I don't even know if that is useful and it certainly will mess things up if you use it in an already set up project because it's currently overwriting everything, so yeah, be careful.

I am working on (or AI is I guess) generating CMP/KMP projects which would be really nice.

Obviously this will never be as smooth as a bun or pip but it gives a familiar-ish experience.

If you are an Android dev, to get started:
kpm new MyApp --android --compose kpm add <Library here> will add a dependency

Curious and nervous to hear what people think. Thank you!
by Computer0 | 2026-02-20 04:23:51+00:00
I found it valuable to read archive.is owner's blog: https://lj.rossia.org/users/archive_today/

Personally I am finding this situation problematic and am seeking immediate replacement. Wayback Machine seems better but I am thinking of something that is less clunky, and has a good API. I think I am just going to pay for https://perma.cc/.
by anonym29 | 2026-02-20 04:24:08+00:00
The difference is that the Chinese intelligence agencies abide by Chinese law and don't really pose any kind of threat to American citizens, while the American intelligence agencies engage in unconstitutional schemes (as ruled by a federal judge) to illegally spy on Americans and lie about it to both congress and the American people, murder American citizens, and can, at any moment they want, fabricate evidence to procure no-knock search warrants where a team of armed gunmen will throw flashbang grenades into the homes of journalists and political dissidents in the middle of the night before barging in with assault rifles.

And yet, for reasons that remain beyond me, many Americans remain more fearful of the former than that latter.
by CGamesPlay | 2026-02-20 04:24:24+00:00
From a brief look, this appears to be using LLM-as-optimizer techniques to generate and measure the impact of skills. That's a lot more involved and likely more effective than the typical "ask Claude to write a skill for the task it just did".

> Using gskill, we learn repository-specific skills for jinja and bleve with a simple agent (Mini-SWE-Agent, gpt-5-mini), boosting its resolve rate from 55% to 82% on Jinja and from 24% to 93% on Bleve. These skills also transfer directly to Claude Code: on Bleve, Claude Haiku 4.5 jumps from 79.3% to 100% pass rate while running faster; on Jinja, Claude Haiku 4.5 improves from 93.9% to 98.5%.
by rexpop | 2026-02-20 04:24:53+00:00
No, I don't, but as an adult in a democracy I have an obligation to address harms done to my countrymen, especially insofar as they're perpetrated in collusion with my government.

I do not like it. It is not fun for me.

But sometimes, as an adult, you have to do the responsible thing, and not stick your head in the sand.

Frankly, I'm disgusted that you're blind to this, and can only imagine that people only care if they are "tickled."

Your indifference only facilitates the perpetuation of harm. Pathetic.
by wolrah | 2026-02-20 04:24:55+00:00
> Huh? Is this true? It doesn’t make intuitive sense to me—if the device doesn’t have a 5ghz radio I would expect it to be physically impossible for the 5ghz network to interfere.

It's not an issue with the device itself, it's an issue with the device setup process.

For whatever reason, I assume it's easier in some common device platform, a lot of IoT devices do not use the SSID for discovering WiFi APs. Instead they connect directly to the BSSID (read: WiFi MAC) of the specific radio on the AP. These devices always rely on a phone app for setup, and the phone app has you select the WiFi network by the SSID name, but passes the BSSID to the device over Bluetooth.

When your phone is connected to the 5 GHz (or now 6 GHz) radio as would be normal for a modern device in a combined network, the BSSID it sees is invisible to the 2.4-only IoT device and thus it doesn't work unless you force your phone to only see the 2.4 GHz radio.

The problem also comes up if you have a larger network with multiple access points, set up a device, and then move it (or if your phone just happens to be hanging on to a more distant AP that the IoT device's puny antenna can't see).

It's been a stupid problem from the beginning, it'd be trivial to solve permanently in software if these device vendors would get their heads out of their collective asses, and yet the "you have to disable 5GHz" nonsense persists for the same reason as software vendors still insist on admin privileges for everything, any/any firewall rules, etc.
by greesil | 2026-02-20 04:25:17+00:00
"This bill would require, on or before July 1, 2028, any business that produces or manufactures 3-dimensional printers for sale or transfer in California to submit to the department an attestation for each make and model of printer they intend to make available for sale or transfer in California, confirming, among other things, that the manufacturer has equipped that make and model with a certified firearm blueprint detection algorithm. If the department verifies a printer make and model is properly equipped, the bill would require the department to issue a notice of compliance, as specified. The bill would require, on or before September 1, 2028, the department to publish a list of all the makes and models of 3-dimensional printers whose manufacturers have submitted complete self-attestations and would require the department to update the list no less frequently than on a quarterly basis and to make the list available on the department’s internet website. The bill, beginning on March 1, 2029, would prohibit the sale or transfer of 3-dimensional printers that are not equipped with firearm blocking technology and that are not listed on the department’s list of manufacturers with a certificate of compliance verification, except as specified. The bill would authorize a civil action to be brought against a person who sells, offers to sell, or transfers a printer without the firearm blocking technology.
This bill would also make it a crime to knowingly disable, deactivate, uninstall, or otherwise circumvent any firearm blocking technology installed in a 3-dimensional printer with intent to manufacture firearms or to distribute, sell, or transfer for consideration in California one or more modified versions of a 3-dimensional printer identified on the Department of Justice’s list of 3-dimensional printers eligible for sale in California. By creating a new crime, this bill would impose a state-mandated local program."
by arjie | 2026-02-20 04:25:47+00:00
I run most of my time in `claude --dangerously-skip-permissions` but I do tab back often to check what it's up to. So far, because LLMs are not fast enough this is fine, but sometimes I find it being too clever for my good. The best reference I can think of for a Claude like this is that it's like the ravenous unraveling AI in Zachary Mason's Void Star: Cloudbreaker. Cloudbreaker just wants to extract information from everything and is unfathomably good at it. You go to it to break encryption but you have to be careful interacting because it will take everything.

Claude Opus is like Slow Helpful Cloudbreaker. And not even actually slow. Just slow compared to how fast you expect machines to act.
by ffsm8 | 2026-02-20 04:27:30+00:00
Intuitively yes, but it's possible that this is one of our biases speaking

From my memory (might be mistaken) there have been attempts to somewhat study this via polls etc, and determined that coverage via propaganda (specifically Fox News) is less helpful then randomly guessing what actually happened...

But ymmv, social studies are always hard to trust, because it's borderline impossible to prove cause and effect
by JohnBooty | 2026-02-20 04:27:59+00:00
But let’s not forget the METR study that
found a 20% increase in self-reported productivity
but a 19% decrease in actual measured productivity.

Counting "time per PR" is as useless as counting lines of code.

An industry I think we spend ~10% of our time writing code and ~90% of our time maintaining it and building upon it.

The real metric is not "how long did that PR take" but "how much additional work will this PR create or save in the long run." -- ie did this create tech debt? Or did it actually save us a bunch of effort in the long run?

My experience with ChatGPT these last few years is that if used "conscientiously" it allows me to ship much higher quality code because it has been very good at finding edge cases and suggesting optimizations. I am quite certain that when viewed over the long haul it has been at least a 2X productivity gain, possibly even much more, because all those edge cases and perf issues it solved for me in the initial PR represent many hours of work that will never have to be performed in the future.

It is of course possible to use AI coding assistants in other ways, producing AI slop that passes tests but is poorly structured and understood.
by senordevnyc | 2026-02-20 04:28:29+00:00
Sorry, too many blatant lies from Elon and co, I don't trust anything on their bullshit site.

lol, this is relevant: https://www.techdirt.com/2026/02/19/doge-bros-grant-review-p...

DOGE Bro’s Grant Review Process Was Literally Just Asking ChatGPT ‘Is This DEI?’

Fuck these unserious clowns.
by zippyman55 | 2026-02-20 04:28:51+00:00
I’m retired so my focus is a bit different. But I vibe coded a little Java script for a website. Julian dates have a range of three digits and if I were coding by hand I would have easily anticipated this. But I was oblivious to this and disappointed with the new year and the discovery of my error introduced in vibe coding. All I can think of: what a time bomb to maintain code for large scale enterprises.
by handoflixue | 2026-02-20 04:29:16+00:00
See, the problem is, "obviously harmless" varies by person: if you think it is obviously harmless to ban an entire political party, which ostensibly won a legitimate election, and certainly had a lot of popular support... well then, of course we should also ban whichever current political party you consider most evil, right? And then the next most evil political party, and so on, until people have the freedom that comes from knowing only Good, Proper, State-Sanctioned Political Parties exist!

And of course, once it's illegal to agitate against violence, we just have to redefine violence: for instance, posting about Nazis puts them in danger, and they're all white, so clearly you're a racist for opposing Nazis.

These aren't hypothetical examples: the people defending Free Speech have watched these slippery slopes get pulled out again and again. Misgendering a trans person is a "hate crime", reporting on the location of gestapo agents is "inciting violence", protesting against the state is "terrorism"

And fundamentally, this is a lever that gets wielded by whoever is in power: even if you agree with the Left censoring Nazi salutes, are you equally comfortable with the Right censoring child mutilation sites (also known as "Trans resources")?

SURELY "child mutilation" is "obviously harmless" to ban, right?
by danpalmer | 2026-02-20 04:29:20+00:00
Similar to my experience with the two. We didn't have regular meetings with our GCP account manager, but they did help us and we had a technical support rep there we were in contact with sometimes. We rarely heard from anyone at AWS, and a friend had some horror stories of reporting security issues to AWS.

Architecturally I'd go with GCP in a heartbeat. Bigquery was also one of the biggest wins in my previous role. Completely changed out business for almost everyone, vs Redshift which cost us a lot of money to learn that it sucked.

You could say I'm biased as I work at Google (but not on any of this), but for me it was definitely the other way around, I joined Google in part because of the experience of using GCP and migrating AWS workloads to in.
by robocat | 2026-02-20 04:30:27+00:00
If you've got the yen for travel, maybe visit an Asian country where she might be a "normal" size against the population.

I went to Vietnam and noticed the sizing difference for myself: suddenly I was oversized. I've also seen the opposite in other countries where sizes are much bigger and I'm on extra small sizings.

Vietnam is great for getting tailored clothing too - if you can avoid the worst of the tourist tailors.

Worth a try, if you can find a country that has a style she likes...
by jcgrillo | 2026-02-20 04:31:26+00:00
Whether the victim is upset or not, the story here is that some clown's uncontrolled, unethical, and (hopefully?) illegal psychological experiment wasted a huge amount of an open source maintainer's time. If you benefit from open source software (which I assure you, since you've used quite a lot of it to post a comment on the orange website, you do!) this should ring some alarm bells.
by inventor7777 | 2026-02-20 04:31:42+00:00
True. However, I've always noticed that ARM has less Linux support than x86, and the main benefits ARM is known for are typically performance/watt, running cooler, and less legacy support.

Since this server seems to have pretty average performance/watt and cooling, I can't really see much advantage to ARM here, at least for typical server use cases.

Unless you're doing ARM development, but I feel like a Pi 4/5 is better for basic development.
by neither_color | 2026-02-20 04:31:45+00:00
It's not just about language.
There's no common practical path to becoming "Chinese", either in a legal or cultural sense. Save for a few rare exceptions, you cannot move there, join the culture, become a citizen, etc even if you're fluent. The western systems arent perfect but they allow a greater number of people who really want to assimilate do so regardless of background.
by altairprime | 2026-02-20 04:32:13+00:00
This is why I run educational software (and VMware’s edusoft remote VM client) in native Mac VMs. Not surprised to see someone trying to abuse data harvesting from another country, too. Perhaps a report to Apple Security might be in order, to let them evaluate whether it’s an RCE/CNC scenario (we only have the telemetry detected so far!) and whether it deserves a malware kill worldwide. Though I’m surprised it’s allowed to access all those properties without a Permissions dialog. Maybe this will inspire Apple to finally let us deny Discord its system-wide data collection activity!

ps. UTM.app is a nice way to sandbox Discord, since it’s using the OS-level sandbox already in a way that prevents us from limiting it further with a .sb file. Takes some extra space, I suppose.
by rtkwe | 2026-02-20 04:33:05+00:00
The point they were making was that you could tell via ping times if the traffic was literally being routed through VA unnecessarily because the extra unavoidable light speed delay that extra distance would add between a user and the server if they weren't already very near to VA. Could be mirrored via the type of monitoring you're talking about but that'd only get you mostly encrypted traffic unless the 90s cypherpunk paranoia turns out to have been true.
by EGreg | 2026-02-20 04:33:49+00:00
This reminds me of "Radio Free Europe" and "Radio Liberty", which were basically bankrolled (and likely largely influenced) by the CIA. They wanted to distribute all kinds of programming into USSR that was banned there, same with Solzhenitsyn's books etc. Eventually the USSR fell apart.

Now they are treating Europe like they treated USSR. Musk and other big influencers on X have already been calling for the breakup of the EU, after the EU fined X $100M. I bet that was at least some of the reason behind this.

The irony is that the Trump admin has been deporting non-citizens for speech, his FCC has been intimidating media like ABC and CBS into firing people or canceling programs and interviews, his DOJ has been telling social networks to fork over the identities of citizens who criticized ICE online, and his CBP will begin demanding that tourists hand over 5 years of their social media history, as well as their biometrics, family's information and whatever else.

This is the administration who would lecture Europe about freedom of speech? Didn't they just get through 10 years of telling European countries to be "nationalist" and resist the influence of their own federal government in Brussels -- but I guess we can just ignore their laws and broadcast anything into their countries, tempting them to set up a "great firewall" like China.

Well, if freedom of speech means violating other countries' laws, in this case can European governments just start streaming copyrighted movies for free to US viewers, and piss off the RIAA / MPAA? Or maybe they can do what Cory Doctorow has been proposing: https://doctorow.medium.com/https-pluralistic-net-2026-01-29...

It's like when USA ignores European trademarks (actually even stronger, PDOs) like Champagne or Parmesan but expects Europeans to honor US trademarks.
by senordevnyc | 2026-02-20 04:34:24+00:00
You could maybe create a better product with a billion dollars, I'll give you that. But that's nowhere near enough to win. It's downright laughable to think that you could beat Slack or Google Workspace with only a billion dollars.

Why do you think Slack sold for $27 billion? Why not just spend a billion and beat them? OpenAI or Anthropic have collectively raised more than $100 billion. What on earth makes you think you could replicate that AND beat them at their own game with only a billion?