MurphyA/hacker-news huggingface dataset:
by paulfitz | 2026-02-03 23:40:17+00:00
Grist forms support uploads since 2025 https://github.com/gristlabs/grist-core/pull/1655

Since it is relevant here: support for uploads was code written by a French contributor, and reviewed by a developer working for the French gov (ANCT/DINUM) and a developer working for Grist Labs. Grist Labs has since maintained and improved on it. The forms feature itself was inspired by an integration built by Camille Legeron at ANCT.
by briandw | 2026-02-03 23:40:26+00:00
point conceded, they do enforce gdpr on smaller companies
thanks for the enforcement tracker link
i scraped that page to get the raw data and added it up by company.
i wanted to see how much the main us tech companies paid vs everyone else

these aren't audited but
total €6,848,216,522
us tech €4,527,961,028

so 66% from just a few companies from outside europe
by skrtskrt | 2026-02-03 23:40:28+00:00
This isn't about timing the market by being clairvoyant about the timing of a madman's tariffs.

This is about taking reasonable risk calculations as a small business with extremely high tariff exposure, when a president who did a bunch of high tariffs last time wins and election and says he'll do it again.

Sure multi-trillion-dollar financial institutions didn't run for the hills because they get paid when it goes up and paid when it goes down.
by johnsmith1840 | 2026-02-03 23:40:39+00:00
This is the assumption of a hard plateu we can effectively optimize forever towards while possible we havn't seen it.

Again my point is "good enough" changes as possibilities open. Marketing teams running entire infra stacks is an insane idea today but may not be in the future.

You could easily code with a local model similar to gpt 4 or 3 now but I will 10-100x your performance with a frontier model and that will fundamentally not change.

Hmmm but maybe there's an argument of a static task. Once a model hits that ability of that specific task you can optimize it into a smaller model. So I guess I buy the argument for people working on statically capped conplexity tasks?

PII detection for example, a <500M model will outperform a 1-8B param model on that narrow task. But at the same time just a pii detection bot is not a product anymore. So yes a opensource one does it but as a result its fundamentally less valuable and I need to build higher and larger products for the value?
by socalgal2 | 2026-02-03 23:40:40+00:00
I used to use terminal windows separate from my editor. Now I use VSCode, I have 6 different but related projects open. In VSCode this means 6 windows, each with multiple tabs etc. In each of those are 1 to 3 terminal editor windows. That means when I switch to that project, shells related to that project come with it. No having to hunt through 6 to 18 terminal windows to find the correct one(s)

Turns out, for me, the terminal emulator embedded in the IDE has been a big plus.
by Rochus | 2026-02-03 23:41:22+00:00
The author is a CTO/CPTO who explicitly describes himself as a "hands-off manager", who hasn't touched code in over many years. His view that GenAI "only speeds up the typing" is a classic management-layer misconception. It assumes the engineering is the typing. Classical Systems Engineering treats the "development system" as part of the system. Requirements are not "unknowable"; they are derived through rigorous analysis (Functional/Physical architectures). The (post-)Agile software school views rigorous requirements analysis as "Waterfall" and impossible. The author is effectively admitting that the software industry has lost the capability to perform the Requirements Analysis & Allocation tasks defined in standards like IEEE 1220. The author thinks the industry fails because it treats software as "construction" (predictable). I would rather say that industry fails because it abandoned the discipline required to make it predictable. Sending humans to the moon was arguably "Complex", but it was solved by treating it as a determinable engineering challenge. "Users don't know what they want" is a failure of Systems Engineering, not a metaphysical property of software. "Agile" eventually became a "cargo cult" itself, as the pseudo engineering approaches it wanted to replace.
by BrandoElFollito | 2026-02-03 23:41:25+00:00
> Is EU really viewed as some kind of charity to the ungrateful "easterners" in France?

Poland spending 9.1 B€, revenue 7.8 B€ → net beneficiary (1.3 B€)

France spending 16.4 B€, revenue 24.2 B€ → net contributor (7.8 B€)

> does surrendering their market and massively adapting and opening their economies to the dominant western EU economies completely goes unnoticed in this context?

What planes does LOT use? Boeing? What military aircraft? American. Who broke the contract on European helicopters to get American ones?

The US is not even in the top 5 investors in Poland, all are from the EU.

Who is going to go ahead for the nuclear umbrella? France, probably, not the US.

If Poland were suddenly not in the EU would that be a major issue for the EU or Poland?

Now, to be crystal clear: I love Poland. I travel there often, have very close friends and the country is magnificent. The education is top-notch, the culture as well. I am with all my heart with the progressive parties and not some bozos from PiS or the other party I forgot with the leader who looks like mentally ill (the one who was running with the fire extinguisher in the parliament or harassed a pro-abortion doctor).

But since we are talking money then let's not get emotional. And I am emotional when it comes to this particular country and of course mine - France.

I am all for Poland (and other countries) to be a true member of the EU, which brings some obligations as well. Including an adhesion of its population through the voting results. For this to talk to the general populations in the net contributor basket who will ultimately vote as well.

> The provision of cheap educated workforce to the western companies also never happened?

Yes it did. It is not "cheap" educated workforces because they are paid the same when in France (or other countries) and bring an extremely good education and cultural background. I know something about that.

It is a superbly educated workforce.

> BTW, Poland probably has the most pro-EU population with a full awareness that soon we will likely become a net payer

This is not reflected in the 2021-2017 EU budget but ok, maybe. Good luck with that (and I am saying this without any sarcasm, I really wish Poland to get as great as possible)

> I am also starting to be convinced that this patronizing attitude from the "real" Europeans that is starting to drive EU skepticism in the eastern flank. peace.

What our former president said (Chirac) about the "two speed Europe" is disgusting. There are no "real" Europeans. There are just political trends (fueled by votes) that adhere more or less to the EU as a whole and commit accordingly. Tusk was one of these people when he was in the EU Commission, but the wave seems to be diminishing.

> peace

Yes.
by SLWW | 2026-02-03 23:41:34+00:00
The mystic bent limits the usability of the deck, since most people I play with, when playing games like Sheepshead try playing with more traditional decks. As well as traditional Tarot decks from Russia (OG tarot, not modern designs).

Vintage Tarot decks include more art/influence from the current ruling empire, not new-age mystic nonsense.
by autoexec | 2026-02-03 23:41:53+00:00
> The last check on power is murdering politicians in their homes?

You said murder, but there are plenty of valid reasons that the public should know who holds positions of power and where they live that don't involve violence of any kind.

Protest is an essential freedom we have and it's perfectly valid to do it outside of the homes of those we have put in power. It's also useful to have that information when investigating fraud and corruption.
by tonymet | 2026-02-03 23:42:00+00:00
I noticed I had version 8.9 on Dec 28, 2025 and it seems clean according to

https://arstechnica.com/security/2026/02/notepad-updater-was...

I recommend removing notepad++ and installing via winget which installs the EXE directly without the winGUP updater service.

Here's an AI summary explaining who is affected.

Affected Versions: All versions of Notepad++ released prior to version 8.8.9 are considered potentially affected if an update was initiated during the compromise window.

Compromise Window: Between June 2025 and December 2, 2025.

Specific Risk: Users running older versions that utilized the WinGUp update tool were vulnerable to being redirected to malicious servers. These servers delivered trojanized installers containing a custom backdoor dubbed Chrysalis.
by cyberax | 2026-02-03 23:42:20+00:00
> There are people literally working on accomplishing this.

They're reinventing physics? Wow! I guess they'll just use Grok AI to fake the launch videos. Should be good enough for the MVP.

For the superconductivity idea to work, the entire datacenter needs to be shielded both from sunlight and earthlight. This means a GINORMOUS sun shield to provide the required shadow. But wait, the datacenter will orbit the Earth, so it also will need to rotate constantly to keep itself in the shadow! Good luck with station-keeping.

There's a reason the Webb Telescope (which is kept at a balmy 50K) had to be moved to a Sun-Earth Lagrange point. Or why previous infrared telescopes used slowly evaporating liquid helium for cooling.

> I don’t understand what’s with the arrogance and skepticism.

Because it's a fundamentally stupid idea. Stupid ideas should be laughed out.

I'm not talking about "stupid because it's hard to do" but "stupid because of fundamental physical limitations".
by codethief | 2026-02-03 23:42:50+00:00
Well said.

> Replacing it with Slack means paying $8-12 per user per month on top of your existing Office costs, because you still need Outlook, Word, Excel, and SharePoint. For a 500-person company, that's an additional $48,000-72,000 annually for a tool that overlaps with something you've already paid for.

If only in this calculation they'd factor in how much time each employee wastes because of Teams glitches…
by lightyoruichi | 2026-02-03 23:42:53+00:00
Hi Preston, I took a look at this and here's my comments:

- Wrong ICP, "early stage founders" is not a buyer. They don't have enough email spam problems. Later-stage founders who do already have an EA.

- You're assuming the pain. People generally don't have problem with email scheduling. And if someone were truly spending 6+ hours a week on it, they would have already delegated.

- The messaging framing hurts you. The moment Persona is compared to a human EA, you lose on judgment, context, and trust.

What could work though,

- Narrow to a pathological edge case. One role, one moment, one acute pain.

Examples: solo VCs without EAs, boutique bankers mid-deal, lawyers coordinating multi-party calls under time pressure, founders actively fundraising without support.

- Reframe away from scheduling. Don’t sell logistics or efficiency. Sell control. This is a way more powerful messaging instead.

- Stop outbound. Insert parasitically into their workflow. Live where the pain already exists. Gmail plugins, CRM edges, investor update workflows. Be an appendage, not a destination.

- Accept that this may not be a standalone company. It may only survive as a feature inside a larger assistant or email client.

I know it's a bitter fruit but think about this and digest it. This isn’t about tactics. The problem doesn’t hurt enough for the people you’re targeting, at the moment you’re targeting them.
by aunty_helen | 2026-02-03 23:43:41+00:00
The equation has a ^4 to the temperature. If you raise the temperature of your radiator by ~50 degrees you double its emission capacity. This is well within the range of specialised phase change compressors, aka fancy air conditioning pumps.

Next up in the equation is surface emissivity which we’ve got a lot of experience in the automotive sector.

And finally surface area, once again, getting quite good here with nanotechnology.

Yes he’s distracting, no it’s not as impossible as many people think.
by oulu2006 | 2026-02-03 23:43:52+00:00
Same, I have a bunch of skills defined ith proper YAML headers and semantic triggers installed, I make a point of listing not too many but making it quite specific.

Even with that, I have to be very specific in triggering a skill and it's hit or miss if it picks up on the skill -- usually I have to say there is a skill with this go and use it.
by CGMthrowaway | 2026-02-03 23:43:53+00:00
IDK if "bigger and slower aircraft" is what he meant, but rather "bigger and slower engines." Jets cruise @ mach .85 because that's the economic optimum set by wave drag, compressibility and passenger time costs. Hasn't changed in 50 years.

The relevant metrics are amount of air moved and speed the air is accelerated to, aka efficiency gains from propulsive efficiency- e.g. increasing bypass ratio, larger fan diameter, lower jet exhaust velocity
by AnthonyMouse | 2026-02-03 23:44:20+00:00
The thing I find irritating is that the government has been doing things as bad the things Trump is doing for decades, and those things are actually bad and shouldn't be done, but people are now acting like Trump invented them.

Don't get offended that Trump is more brazen about anything than anyone else and try to retaliate against him in particular, instead change the things that need to be changed so that nobody can do those things anymore, even when they're acting like they're not.
by gruez | 2026-02-03 23:44:30+00:00
>Don’t forget that captain of the plane makes decisions not Elon.

>If captain of the plane disobeyed direct threat like that from a nation, his career is going to be limited. Yeah Elon might throw money at him but that guy is most likely never allowed again to fly near any French territory. I guess whole cabin crew as well .

Again, what's France trying to do? Refuse entry to France? Why do they need to threaten shooting down his jet for that? Just harassing/pranking him (eg. "haha got you good with that jet lmao")?
by Soerensen | 2026-02-03 23:44:36+00:00
The $10 deposit validation approach before committing to manufacturing is underrated. So many hardware projects fail because founders fall in love with the build before confirming anyone will pay.

What stood out to me: the factory miscommunications and quality issues compound because you can't iterate as fast as software. Each mistake costs weeks and thousands of dollars.

For anyone considering hardware: if you're not getting deposits or strong signals of purchase intent before tooling up, you're basically gambling. The author's approach of getting commitments first is the right playbook.
by jacobgkau | 2026-02-03 23:44:38+00:00
The XDG portal standards being developed to provide permissions to apps (and allow users to manage them), including those installed via Flatpak, will continue to be useful if and when the sandboxing security of Flatpaks are improved. (In fact, having the frontend management part in place is kind of a prerequisite to really enforcing a lot of restrictions on apps, lest they just stop working suddenly.)
by nextos | 2026-02-03 23:44:39+00:00
Snap and Flatpak do both sandboxing and package management.

You can use the underlying sandboxing with bwrap. A good alternative is firejail. They are quite easy to use.

I prefer to centralize package management to my distro, but I value their sandboxing efforts.

Personally, I think it's time to take sandboxing seriously. Supply chain attacks keep happening. Defense is depth is the way.
by eek2121 | 2026-02-03 23:45:30+00:00
Just a fun random fact from me: We do need more lumens. Not for normal (non-production) indoor lighting in most situations, however, I always want a bright light for my outside lights, and I find that most 100w-equivalent (1500 lumens) are just not quite enough. 2,000 lumens is almost there, however, 2,500 lumens would be beneficial. Both 2,000 and 2,500 lumen bulbs either don't last in temperature extremes, or are super expensive. The power on time (think hours per day of use) and color of the light matters as well. In my use case, I need a bulb that can withstand long periods of time being run from dusk till dawn. I am willing to pay a decent amount for a guaranteed warranty for X years, however most bulbs of ANY amount of lumens only guarantee 1-3 hours a day for 1-5 years. When you need 7-10 hours a day, well...
by vunderba | 2026-02-03 23:45:53+00:00
Nice job. I've seen a couple of these on HN (Resume-context driven chat interfaces). [1] [2]

I can't speak to whether this could become a realistic standard but you might want to reach out to @jhgaylor who took a stab at trying to build an MCP server around this concept. [3]

[1] - https://www.jon-olson.com/resume_ai

[2] - https://replicant.im/alex

[3] - https://news.ycombinator.com/item?id=43891245
by Soerensen | 2026-02-03 23:45:55+00:00
The WinGUp updater compromise is a textbook example of why update mechanisms are such high-value targets. Attackers get code execution on machines that specifically trust the update channel.

What's concerning is the 6-month window. Supply chain attacks are difficult to detect because the malicious code runs with full user permissions from a "trusted" source. Most endpoint protection isn't designed to flag software from a legitimate publisher's update infrastructure.

For organizations, this argues for staged rollouts and network monitoring for unexpected outbound connections from common applications. For individuals, package managers with cryptographic verification at least add another barrier - though obviously not bulletproof either.
by zer00eyz | 2026-02-03 23:46:52+00:00
Admiral Grace Hopper is famous for using a length of wire to explain to others what a nanosecond was.

https://www.pbs.org/newshour/world/pentagon-embraces-musks-g...

Data centers in space make absolute sense when you want as close to real time analysis on all sorts of information. Would you rather have it make the round trip, via satellite to the states? Or are you going to build these things on the ground near a battlefield?

Musk is selling a vision for a MASSIVE government contract to provide a service that no one else could hope to achieve. This is one of those projects where he can run up the budget and operating costs like Boeing, Northrup etc, because it has massive military applications.
by Soerensen | 2026-02-03 23:47:36+00:00
The secrets placeholder design is the right trade-off for this use case. You're essentially accepting that malicious code can still use your API keys for their intended purpose - the goal is preventing permanent exfiltration.

The interesting attack surface that emerges: any endpoint on your approved hosts that reflects input back in responses. Error messages, search pages, create-then-read flows. The thread already covers this, but practically speaking, most API providers have learned to sanitize these paths after years of debugging sensitive token leaks in logs.

For anyone evaluating this vs. rolling your own: the hard part isn't the proxy implementation, it's maintaining the allow-list as your agent's capabilities grow and making sure your secret substitution rules are tight enough to catch edge cases.
by UqWBcuFx6NV4r | 2026-02-03 23:47:42+00:00
This comment really shows how far the SV VC culture still is from running profitable businesses with solid fundamentals. No surprise that I am hearing this on the same website where people come to act like hard-done-by factory workers whenever [incredibly bloated and dysfunctional FAANG] lays people off after facing the real-world financial realities.

For the love of God, no. Do not do that. The cycle begins when you take the money. How there are still people here that don’t get this, I don’t understand.
by deceptionatd | 2026-02-03 23:48:34+00:00
112 and 911 (US) work on almost every mobile phone anywhere in the world. It's part of the GSM/UMTS standard. 999 is supported with either no SIM card or a UK SIM card. See §7.1 here: https://www.ietf.org/lib/dt/documents/LIAISON/file562.pdf

They also don't require a phone to be activated in most countries. I believe there are some exceptions in EU countries, but in the US it just needs to have a working antenna and be in range of a tower.
by ashishb | 2026-02-03 23:48:45+00:00
It also has persistent permissions.

Think about it from a real world perspective.

I knock on your door.
You invite me to sit with you in your living room.
I can't easily sneak into your bed room. Further, your temporary access ends as soon as you exit my house.

The same should happen with apps.

When I run 'notepad dir1/file1.txt', the package should not sneakily be able to access dir2. Further, as soon as I exit the process, the permission to access dir1 should end as well.
by andrekandre | 2026-02-03 23:49:55+00:00
> functionality on the left sidebar makes no sense

they really just need to get rid of 'sidebars' and go full-on panel oriented ui so i can put whatever inspector/tool on whatever edge of the window i want; i'm constantly switching between opening panels and closing panels and hunting and pecking for the right panel-within-a-panel with those tiny icons...
by chippiewill | 2026-02-03 23:50:10+00:00
The pre-commit tool (which prek is based on) has a large ecosystem of off the shelf checks for various language linters and other checks and a convenient way of writing them (including working out which files have changed and which checks to run based off of that)

The benefit to many of having them as a hook is that you discover it's broken before you pushed your changes, and not when you finally get around to checking the CI on your branch and realising it failed after 30s.

There is of course no reason why you have to have it installed as a precommit hook - many people prefer to run it manually, and the pre-commit tool/prek allows for that.
by rootusrootus | 2026-02-03 23:50:37+00:00
I've got a number of right wing acquaintances, they 100% call themselves deplorable. And yes, in response to Hillary's use of the term. Even though she didn't call everyone on the right a deplorable, this did not stop them from running with it.

And they do embrace it. To the point where they say 'dirka dirka' when the topic of our Indian managers comes up (never mind that the original movie reference was about Arabs, but whatever), and making comments about women in positions of authority at the company. That's in addition to the comments about trans people.

Hard to say whether that attitude came first or second. And while I can definitely appreciate that nobody wants to be looked down on, there is no requirement that you respond to that by doing that which you are accused of.