MurphyA/hacker-news huggingface dataset:
by JackC | 2026-02-02 14:22:03+00:00
I don't have a job where I need this, but I love the UI experimentation you're doing here -- "fast muscle memory folder-based encrypted snippets for devops" makes total sense as a different need than most password manager users, and I love it when people discover a way of interacting that clicks more with their brain.

I wonder if you could try a variation that keeps passwords in an existing password manager and just uses this as an alternate UI client -- for example with the 1Password sdk https://developer.1password.com/docs/sdks/desktop-app-integr... or this technique for KeePassXC https://pypi.org/project/keepassxc-proxy-client/ . You could expose existing secrets under an "uncategorized" folder, and add a field like "sklad_folder": "foo/bar" to the secret if the user organizes them.

This way your crypto surface area narrows a lot -- you still need to do the integration securely and be thoughtful about any metadata you cache locally (maybe you don't need any!), but you barely touch actual secrets. And you can freeride on all the edge cases existing password managers handle -- recovery, autolock, sync etc. And you don't need to update passwords in two places. And the trust you're asking from users is less -- if I'm considering using your thing, I don't have to fret about all the little policy things you might have done differently from 1Password, I just have to check if you've made a secure frontend. And I can go partway, open up one vault to the frontend but not others, in a way I clearly understand. I'm paranoid and still wouldn't use a 3rd party client to my password manager, but for people who need this it seems like a much more attractive offer that way.
by _aavaa_ | 2026-02-02 14:22:13+00:00
But the problems with hydrogen are fundamental and inherent to it as a molecule, not something innovation can change.

- Energy required to get it from water is fixed.

- energy required to compress it (and got for it liquify it) is fixed.

- Explosion dangers and basically invisible flames are fixed.

- Difficulty in transporting are fixed.

> It appears that there’s about 100x time more funding.

That may be because battery technology has proven itself and has paths to scale (phone, laptops, battery storage, a million different consumer electronics) for any new advancement. While hydrogen has proven itself a failure time and time again and has no paths to scale.

At this point hydrogen powered anything are solutions in search of a problem.
by mamonster | 2026-02-02 14:22:16+00:00
0 chance it can spread. PAYGO systems in general were set up when expanding demographics were not in question. Nobody is stupid enough now to switch to a system that requires an ever growing labor pool in perpetuity.

The problem is that there is no "democratic" way to get rid of them because in most WEU countries retirees/close to retired already make up enough of the population to block any such measure at the ballot box. See for example France.
by hollerith | 2026-02-02 14:22:16+00:00
I'm not trying to defend the comment you are replying to, but if we're going to bring up NixOS in a discussion that started out being about security, I have to point out that even by the low standards of Linux distros, NixOS's security is bad.

For example, NixOS famously didn't require package maintainers to sign the artifacts they upload to NixOS's servers. (They still might not: it has been a year or two since I inquired.) The NixOS project considered it more important to make it easy for people to start maintaining NixOS packages (so that users would have a large selection of packages to choose from) than to have any kind of supply-chain integrity.

Maintaining a distro that is even remotely secure is a great deal of work, and the people that are willing to put in that work don't pick a distro to base their work on at random: they strongly tend to base their work on the distros that already have a pretty good security story, so for example the relatively new distro "Secureblue" is based on Fedora Atomic Desktop because Fedora already had for many years a pretty good security story. (E.g., it and RHEL are the only distros that use selinux in any real way.)

The point is that it is probably going to be hard for NixOS to improve its security much because most Linux maintainers either do not care about security much or aren't rational or curious enough to learn that the security of all Linux distros is severely lacking (compared to ChromeOS, MacOS, iOS or Android) and because the small fraction of Linux maintainers willing to work on improving security naturally tend to direct their work toward a distro and an ecosystem (e.g., Fedora or Debian) that has already been the target of much previous security-improving effort.
by pjc50 | 2026-02-02 14:22:28+00:00
I think this is a valid point; France is sovereign now in a way that Texas isn't, for example. Texas doesn't have an independent nuclear deterrent. Or, more to the point, Minnesota.

But the rationale is clear. Europe has spent too many centuries and too many lives in warfare. There is no way forwards that isn't some kind of unified structure with the guns pointed outwards.
by fileeditview | 2026-02-02 14:22:43+00:00
So why not just merge into one and be 16 times as effective? Sorry for the sarcasm but your calculation is just a wild assumption.

How does the US do it? They have a fair amount of states too with their own laws, don't they?

Sure, federalism produces some overhead and inefficiencies. But it also has many benefits. Especially to avoid too much power in one hand but also others. E.g. you can have different school systems in different states and see what works better and adapt the other systems (if you actually do that is another question).

People are also different in different states. This also applies to Europe and its member states. Just merging all into one is just a recipe to fail epically.
by kvemkon | 2026-02-02 14:24:47+00:00
> You can’t be against the Ukraine war in Russia

I was very glad after discovering [1]. In one of the videos the interviewer explains, why he was not arrested. The channel is for English-speaking auditory outside of Russia. Back then it was enough to "close eyes" for some openly expressed critiques. Though it was painfully to listen to some people that were not against the war.

[1] https://www.youtube.com/@1420channel/videos
by appreciatorBus | 2026-02-02 14:25:02+00:00
I wish that were true, but in my experience so far, it isn’t.

Not only does politics and general stories crowd out everything else over time on other sites, there are HN submitters who seem to be trying to accelerate this.

During the war, when HN was getting Israel-Palestine stories constantly, I started looking at the submission history of some of the submitters, and some of them were just pushing these types of stories every day for months and months.

So yes, I think allowing politics will eventually mean being dominated by politics and general interest.
by alephnerd | 2026-02-02 14:25:06+00:00
The EU has the capacity, but will be working closely with other partners like India, Japan, South Korea, Israel, Vietnam, and the UAE as capital and/or technology partners.

For example, Eutelsat - which is providing the backbone for GOVSATCOM and IRIS2 - is a three-way partnership between India's Bharti Group (Sunil Mittal), the French, and the UK. Or GCAP where Japan's Mitsubishi Group is acting as both a technology and capital partner to Italy and the UK.

This was also a major driver behind the EU-India Defense Pact and the EU-Vietnam Comprehensive Security Partnership - both of which were overshadowed by the EU-India FTA.

A multilateral organization like the EU has the muscle to integrate and cooperate with other partners, which is something that shouldn't be underestimated.
by andsoitis | 2026-02-02 14:25:11+00:00
I would label that "scoring", not "voting".

But if we ignore semantics for a moment, yours is a testable hypothesis.

> reward originality, clarity, kindness, strong evidence, or creative thinking, and to downvote low effort posts, repetition, hostility, or bad faith arguments.

However, I think there are better ways to improve contributions than taking away the ability for other humans to express explicit judgment on someone's post without also having to write something.

For instance, perhaps the UI where you add your post can do real-time evaluation and suggestions for improvement (e.g. pointing out snark, personal attacks, etc.). That gives the poster the opportunity to make a different decision of what to write.

One trap with your model worth considering is that if the AI gets things wrong (e.g. gives you a negative count because it thinks you're not kind or don't give a sufficiently substantiated rebuttal in your argument), it will be very frustrating for participants and they will blame the board, not other users (who are free to disagree).
by bluebarbet | 2026-02-02 14:25:21+00:00
The declared aim of Nato sec-gen is 5%.

The EU and USA have similar total GDP measured by PPP, and USA spends 3.4%. So 10% would be wildly excessive by any measure. In addition the EU has three times the population of the unstated enemy, Russia.

But it's true that this initiative is happening too late.
by n4r9 | 2026-02-02 14:26:01+00:00
According to this webpage you can do it by phone: https://www.gov.uk/guidance/report-your-fuel-prices-and-fore...

I wouldn't look forward to having to do that every time I changed prices!

I wonder how many small independent stations are there these days? Almost every one I see is either in a supermarket, a big chain like Esso, or a smaller chain like Harvest.
by phkahler | 2026-02-02 14:26:03+00:00
>> This just, essentially, allows the adbroker (e.g. Google) to get more money from the business putting up the ad.

It lowers the effectiveness of internet advertising. When advertisers feel they're paying too much for the business the ads generate, they'll stop advertising in that way. That's probably the thinking anyway. A less generous stance would be: I hate advertisers so I'm gonna get back at them by making them pay more.
by smetannik | 2026-02-02 14:26:16+00:00
Termius is SSH client.
Termux is basically a terminal emulator + package manager. You can run Node, Rust, Claude Code locally on your phone.

As an example - I used it to do Rustlings every day I commute on a subway. NYC subways don't have mobile network coverage, so I can't just SSH there into a remote machine.
by bhouston | 2026-02-02 14:26:40+00:00
Archive link:
https://archive.is/WJ36r

One key quote:

"The request from the IDF email address asked for help making Google’s Gemini more reliable at identifying objects such as drones, armored vehicles and soldiers in aerial video footage, according to the internal documents included with the complaint. Staff in Google’s cloud unit responded by making suggestions and doing internal tests, the documents said."

Another showing double standards:

“Many of my projects at Google have gone through their internal AI ethics review process,” the former employee who filed the complaint said in a statement to The Post, provided on the condition of anonymity for fear of retaliation from the company. “That process is robust and as employees we are regularly reminded of how important the company’s AI Principles are. But when it came to Israel and Gaza, the opposite was true. … I filed with the SEC because I felt the company needed to be held accountable for this double standard.”
by imglorp | 2026-02-02 14:26:43+00:00
I wonder if microkernels more relevant now than ever given their reduced attack surface, and also the recent availability of more cores.

One big criticism from decades ago was the loss in efficiency. But what's changed since microkernels were conceived is how many processor cores are available to offload userspace drivers from the kernel.

Is this a valid viewpoint? Is it time for microkernels to overtake monolithic kernels?
by snowpid | 2026-02-02 14:27:27+00:00
1.) Someone complains about racism in Europe. In this regard Singapore is not an alternative.
2.) Sure European countries can learn something from Singapore or China. But definitely not on topics like racism and freedom of press.
3.) Was Singapore a shithole place giving its location? I doubt it because it started as a harbour where location matters. On the other hand Singapore government was quiet capable. So very interwined topic and longer discussion is needed.
by fallingfrog | 2026-02-02 14:27:35+00:00
Yes this is absolutely true. Difficult to impossible, I would say.. my prediction of "2 to 3 years" could very well be totally wrong.

The dominant narrative around bitcoin right now is "hodl because in the long term it always goes up." Thats the core premise that the bitcoin price is based on. If that premise were to crack, bitcoin could drop to near zero for all we know.
by mfsch | 2026-02-02 14:27:39+00:00
Perhaps of interest: I came across this retrospective of the author of that site and how he moved it to static hosting a couple of years ago [1].

I would also say that this library covers more or less the “lower half” of solo ball juggling in terms of difficulty. With lower ball counts (say ≤ 4), there are a lot of these patterns that have complex arm movements and can be difficult to explain with words, so having such a listing with animations and step-by-step instructions is very valuable. Starting with 4 balls, there’s less and less time for moving your arms around and it is more about the sequence of heights of the throws, which are well described with just their numeric “siteswap” pattern and you can learn them just from knowing the number sequence. The site has only the most basic of those (e.g. 534) and even very common 4-ball (7531, 633) patterns are missing with hardly anything beyond that.

[1]: https://ianconvy.github.io/projects/other/libraryofjuggling/...
by marcusverus | 2026-02-02 14:28:18+00:00
Every study I've read that supports the "cheap solar" thesis assumes sunny days in normal temperatures, and never includes enough storage to maintain consistent output overnight (after sunny days in normal temperatures, let alone bad days).

In other words, they count on non-solar backup... which not only makes solar more expensive, but basically redundant.

Until Solar+storage is the cheapest form of energy while delivering its promised output at 4AM after a cloudy day in freezing temperatures, the "solar is cheap" stuff is simply dishonest.
by Throaway1982 | 2026-02-02 14:28:35+00:00
The Luddites destroyed machines because industrialization destroyed the only living wage they could have. There was no recourse for them other than accepting an even worse quality of life.

Neither of your links say anything about cheap textiles stopping people from freezing to death. The Luddites' concerns could easily have been addressed by factory owners while still offering cheaper fabrics.

Neither of your links ALSO say that the majority of Luddite groups did as you say in destroying machinery without a goal in mind. The fact is that the Luddites were reacting against extremely unfair labour conditions, not progress. What you have said here is 100% untrue.
by 1dom | 2026-02-02 14:28:48+00:00
I use the built in derp server. I have run a standalone derp server hackily deployed for a month, it worked fine but didn't provide much benefit over the built in one. It was basically just a go package. If you're familiar with running Go code, it's straight forward to run, it's very, very light/unproductionised.

I have a todo task to integrate derp into my headscale deployment properly ("finish ansible role"), but when I picked it up last month, I noticed tailscale had release relay nodes, and they seem like they'd be better suited than dedicated derp nodes, but headscale hasn't implemented support for them yet.

tldr: not to hard to host DERP, just needs publicly facing endpoint (incl. letsencrypt) but the built in one is fine. But relay nodes look like they'll be a better option for most and I'd guess will be implemented in headscale sometime this year.
by vitramir | 2026-02-02 14:28:52+00:00
This sounds like an interesting approach. I’m not fully sure I understand one thing though.

Are you suggesting to completely disable authentication inside the app and rely only on the encrypted channel? If yes, that’s not always an option — many apps have logic that depends on an authentication context, even in preview environments.

If not, how do you translate network-level authentication into app-level authentication? In other words, how does the app know who the caller is, beyond the fact that they can reach it over an encrypted lane?

The idea of treating this as a network isolation problem makes sense, but I’m trying to understand how it works when the app itself still expects a real auth context.
by 123malware321 | 2026-02-02 14:28:58+00:00
this is quite interesting but it has some weird stuff in there which makes me doubt some of the info. I am wondering if it's missing some links (or I am) or that the info is maybe incomplete or somehow wrong.

For example, it mentions exploits for CISCO devices being a primary entry point into tap systems. makes sense, because afaik these devices hold things like tap bridges which control stuff. (not sure ofc, but some info on it was disclosed 12 years ago.. snmp tap bridges).

Then it goes on and says suddenly:
"Salt Typhoon deployed a sophisticated persistence mechanism designed to survive exactly the remediation attempts carriers would eventually undertake. The primary implant, documented by Trend Micro researchers under the name GhostSpider, operated entirely in memory without touching disk, evading traditional antivirus that scans for malicious files"

Afaik, you do not install anti-virus on a CISCO switch or router, or ASA. I've never seen it. The smart install stuff is also network devices, not some kind of app on a user device. So how would anti-virus really be able to see it even if it was on the disk.

Forensic tooling might not be able to find it if its in memory (and the device was powered off... dont do this!) but that's a completely different ballpark.

Wondering if anti-virus and forensic tooling was swapped / confused, or if there is some kind of missing piece of info about a malware that this piece pertains to.

fyi, ghostspider is a windows based malware, so hence i don't see the correlation to the mentions on CISCO popping and getting into the devices that hold taps.

https://www.trendmicro.com/en_us/research/24/k/earth-estries... (mentioned a bit down on the page)

The original article the info in this one relates to https://archive.md/CgRWt#selection-4559.0-4559.257 also doesn't seem so sure about the nature of the breach. it does not mention such specific capabilities.

They mention that us lawmakers / security folks noted:
"The hackers also had the ability to “record phone calls at will”, according to Anne Neuberger, who was a deputy US national security adviser at the time." which is one of the more concrete statements. This statement is completely different from 'having access to wiretaps'

As far as I know this used to be done via things like this:
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6...
which would be very specific access to these cisco devices (so that part _does_ seem to align, the CVE's vs. the capabilities).

It's a very interesting read and pretty well written. Definitely tickles my curiosity, but if anyone has more information related to the specific claims of accessing tap infrastructure rather than telco general infra, this would be welcome!
by JKCalhoun | 2026-02-02 14:28:59+00:00
"You get paid to get stuff done, period."

It sounds like you hate your job? To be sure, I've done plenty of grinding over my career as a software engineer but in fact I coded as a hobby before it turned into a career, I then continued to code on the side, now I am retired and code still.

Perhaps the artist in me that keeps at it.
Ask HN: Can you beat my score of 862,294 points in today's PluriSnake puzzle?
by amichail | 2026-02-02 14:29:29+00:00
PluriSnake is a a daily snake color matching puzzle game.

Gameplay: https://www.youtube.com/watch?v=JAjd5HgbOhU

Beta: https://testflight.apple.com/join/mJXdJavG [iPhone/iPad/Mac]

Color matching is used in two ways: (1) matching circles creates snakes, and (2) matching a snake’s color with the squares beneath it destroys them. Snakes, but not individual circles, can be moved by snaking to squares of matching color.

Randomness is used only to generate the initial puzzle configuration. The puzzle is single-player and turn-based.

Goal: Score as highly as you can. Destroying all the squares is not required for your score to count.

Scoring: The more links currently present in the grid across all snakes, the more points are awarded when a square is destroyed.

There is more to it than that, as you will see.

If you have trouble with the tutorial, check out this tutorial video: https://www.youtube.com/watch?v=k1dfTuoTluY

So, can you beat my score of 862,294 points in today's PluriSnake puzzle?
by Orygin | 2026-02-02 14:29:52+00:00
I know it's real. But it doesn't excuse giving away one's values just because something inconvenienced them.

As an example, do I find some vegans annoying on the internet? Yes. Does it mean I will instead start supporting carnism, or push back on veganism? No, absolutely not. Because these are values I have, and no actions of others can change what I value.
by entuno | 2026-02-02 14:30:21+00:00
Also depends on the size of your fuel tank and how full it already is. The time taken to refuel is (almost) the same regardless, but if you've got a 40l fuel tank vs a 70l one or you're only half-empty then it's going to be less worthwhile.

7p cheaper for 10 minutes works out at about minimum wage if you're buying 30 litres, but with a bigger car you could easily be buying twice that, which works out much better.

Although of course you also need to factor in how much fuel you burn driving to the cheaper place, and the extra wear and depreciation on the car. If you take the HMRC standard rate of 45p/mile (which was meant to cover all of that kind of thing, but hasn't been updated for years) then even going a few miles out of your way quickly ends up costing more than it's likely to save.
by embedding-shape | 2026-02-02 14:31:00+00:00
Yeah, fair enough, I think what he mentioned though, wasn't just about fuel going through the pump being used as coolant, but some extra process that only happens when you're not running below say 10% or whatever, an extra cooling process that only runs when you're not low on fuel. Maybe I misunderstood him though and it's just about the liquid passing through.
by Throaway1982 | 2026-02-02 14:31:08+00:00
Except for the fact that the Luddites' labour grievances could easily have been addressed by the factory owners (rise in pay, better conditions) while still offering cheaper fabrics through industrialization. There was simply no desire to do so. No one was saved from freezing to death by cheaper textiles.

People did starve to death and turn to things such as alcohol due to labour displacement during Industrialization. At the time, the prevailing wisdom was that lower-class people were naturally inferior. Robert Owen challenged this theory.

And yes, that was the choice given to the Luddites. Have no work (and therefore no food), because the factory owner can replace you with machines, and you have no labour rights, so he will simply cast you out and make more profit. I did not miss Mr2Z's argument, yours is just incorrect.