MurphyA/hacker-news huggingface dataset:
by vladdoster | 2026-02-11 14:51:36+00:00
Location: Nashville, TN
Remote: true
Willing to relocate: boston || nashville
Technologies: Python, Django, IaC, Terraform, Golang, CI/CD, Azure/AWS, {ba,z}sh, Lua, Springboot,
Redis, Docker, Open Service Broker, {,non}relational & vector dbs, shared services, SOA
Email: mvdoster@gmail.com

resume: https://linkedin.vdoster.com && http://github.com/vladdoster

sr. cloud software engineer @ Mastercard (5 years)

Designed and built Platform-as-a-Service for microservice workloads running on Azure and AWS
to migrate on-prem workloads to the cloud. The platform operates globally, allowing teams to
deploy to several Azure-backed regions worldwide. Helped plan and create regional landing zones
in Azure for application teams wanting to perform globally. Designed platform components using
Terraform, Go, and Node; developed support tooling using Bash, Python, and Azure CLI. De-risk the
platform by addressing security vulnerabilities and ensuring the platform is PCI compliant.

api/devops software engineer @ Harvard Medical School (2 years)

Worked as part of the DevOps team to manage a 15k core CentOS HPC cluster. Designed and implemented
Python-based security scanning pipeline to securely deploy & run Apptainer images via SLURM.
Coordinated cross-team emergency patching eﬀorts. Collaborated with researchers and engineers across
3-letter institutions to deliver secure research infrastructure. Built CI/CD Pipelines with GitHub, Jenkins,
to automate code builds, testing, and deployments. Wrote Puppet modules to manage configuration of HPC fleet.
Wrote custom Puppet module & Python scripts to automatically remediate Tenable findings.

full-stack software engineer @ Global Prior Art (3 years)

Used Django, Celery, Selenium grid, and AWS API Gateway for IP rotation to scrape USPTO patent PDFs,
apply CV for data extraction, and generate reports with relevant claims, saving employees 4-5 hours daily.
Wrote E2E black-box/fuzzing unit tests. Automated on-premise deployment via Github Actions and Ansible.
by techblueberry | 2026-02-11 14:51:41+00:00
Heard this factoid the other day:

The two primary, notable times tech companies dominated Super Bowl advertising were the "Dot-Com Bowl" in 2000, which featured numerous internet startups, and the 2022 "Crypto Bowl," defined by massive spending from companies like Coinbase and Crypto.com. Super Bowl LX (2026) saw heavy, AI-focused tech saturation.
by kps | 2026-02-11 14:51:44+00:00
> by longstanding convention, that port 23/tcp is given to telnetd type login servers

First thing I ever telnetted to was Melvyl, University of California's library catalogue, around 1985. This was “remote user access” (I was a remote user) to “service hosts” (running the catalogue) providing “remote terminal access”. It was not a login.
by inglor_cz | 2026-02-11 14:51:49+00:00
This sort of construction failure is present everywhere where the public is allowed to make extensive inputs into what gets built. It is not just a US-specific reaction to urban engineering by Robert Moses.

We've let the pendulum swing too hard and instead of a dictatorship of technocrats, we have a dictatorship of vetocrats. A relatively small group of people, sometimes one single individual, can make new construction more complicated than lunar exploration, and there are indeed neighbourhoods whose permitting process took longer than the entire Apollo project.

I live in a house built on a former brownfield, 32 semi-detached houses in total. The whole project was delayed by four years by one dedicated octogenarian who didn't like the idea of new people in "his" neighbourhood and pulled out all stops he could (or even couldn't).
by boringg | 2026-02-11 14:51:51+00:00
This article is a bit painful to read. It should be lessons from living in the remote wildnerness in winter. Pretty much all those problems are relative to rural infrastructure and poor home building. If you live in an area with heavy snow load you want an A-frame roof to de-load the roof (for example see: Tahoe, CA ~ 500-800" snow a year).
by iso1631 | 2026-02-11 14:52:04+00:00
> Oil, water temperature and alternator warning lights would be replaced by a single 'general car default' warning light.

> Occasionally, for no reason, your car would lock you out and refuse to let you in until you simultaneously lifted the door handle, turned the key, and grabbed the radio antenna.

> Every time GM introduced a new model, car buyers would have to learn how to drive all over again because none of the controls would operate in the same manner as the old car.

> You would press the 'start' button to shut off the engine.

If you live long enough, satire eventually becomes reality.
by PurpleRamen | 2026-02-11 14:52:11+00:00
If you look at the request made, then it seems to check the category of the site, for whatever reason. I don't know that extensions, so I don't know if this is a legit use, sloppy use or harmful. I'm also not saying they found nothing at all. But looking through what they found, they seem to have not even thought much about whether those cases are legit and in the excepted and necessary realm of actions the add-on is supposed to do, or if it's really harmful behaviour. I also don't see anything about how often the request was made. Was it on every url-change, or just once/occasionally?

This whole article is a bit too superficial for me.
Show HN: OneUptime – Open-source observability that auto-fixes incidents with AI
by ndhandala | 2026-02-11 14:52:16+00:00
Hey HN,

I've been building OneUptime for the past few years. It's a complete open-source observability platform that replaces Pingdom, StatusPage.io, PagerDuty, Datadog, and Sentry – all in one.

What makes it different: We're building toward autonomous incident resolution. Instead of just alerting you at 3am, the AI agent detects the issue, generates a code fix, and opens a PR. You wake up to fixes, not pages.

Features:

• Uptime monitoring from multiple global locations

• Public/private status pages (free, unlimited)

• Incident management with timelines

• On-call scheduling with escalation policies

• Logs, traces, metrics, error tracking

• OpenTelemetry native

Self-host with Docker/Kubernetes or use our cloud. Apache 2.0 licensed.

Repo: https://github.com/OneUptime/oneuptime
Demo: https://oneuptime.com

Would love feedback, especially on the AI auto-fix feature. What would make you trust an AI to fix production issues?
by jbstack | 2026-02-11 14:52:18+00:00
Replace normal with common, and my original comment stands. In many cultures people often casually say "how is it going?" when they don't mean it literally and they are just expecting a token "good, you?" in response. Some people might view it as unnecessary and insincere, but they don't generally go around lecturing others and telling them not to do it. When you're faced with a harmless cultural behaviour like this, the polite thing to do is just accept it and move on with your life.
by washadjeffmad | 2026-02-11 14:52:18+00:00
I took a day off texting to sleep and recover from an injury, and the woman I was seeing (in her 30s) threatened to delete our chat because she assume I was mad and ignoring her.

She's part of a certain digital generation, and expectations change.

A younger PM I'm working with right now emailed me twice in a few hours because I didn't immediately sign into their management platform after our 4pm meeting. Granted, that's her job, but the project doesn't officially start for a few more months.
by mzajc | 2026-02-11 14:53:47+00:00
I'm dealing with such attack, so if you'd like, you can send me IPv4 addresses, and I'll grep my logs for them. Email address is on the website linked on my profile.

As for what you can do on your own, it really depends on your network. OpenWRT routers can run tcpdump, so you can check for suspicious connections or DNS requests, but it gets really hard to tell if you have lots of cloud-tethered devices at home. IoT, browser extensions, and smartphone applications are the usual suspects.
by 0xmattf | 2026-02-11 14:53:49+00:00
I'm at work, on a work computer, so can't fully test, but yes.

I saved this as test.md, opened it in notepad, clicked the link, and it popped open a command line:

[Click me](C:/Windows/System32/cmd.exe)

Can definitely go further than this; just a quick test.

To be fair, though, it's not just a click -> open/run. The user has to `ctrl+click` and will see the source of the link (at least I do).
by rllearner | 2026-02-11 14:53:59+00:00
> you're pretty dismissive of it without actually reading the details of how they went about things...

I wasn't really trying to be dismissive (other than saying that I personally would not recommend it to a young person interested in programming and deep learning). I was mostly trying to start a discussion that might attract more knowledgeable people (such as yourself). A day later I still stand by my personal opinion that it's probably best to learn the mathematics first, and to use the lingua franca of the domain (python).

> You're not quite judging a book by its cover, but you're not that far beyond that.

Fair. But there wasn't anything else to read in the submission and I was trying to start a curious conversation.
by insane_dreamer | 2026-02-11 14:54:14+00:00
For me, it's not just that -- I don't live in Minneapolis -- but it's the sinking realization that half the country literally voted for this and is either ok or indifferent, so long as we are maintaining our "true (WASP) American culture". Call me naive, but it has come as a pretty big shock to me that Trump has exposed just how rotten a good fraction of Americans are -- and that's before even getting into the removal of climate change action (something I care very deeply about because it concerns my children's future), cuts to science, healthcare and higher education, foreign policy (admittedly, the US has always been a bully, but it's even worse now), clear attempts to rig the upcoming elections, etc. etc.
by exfalso | 2026-02-11 14:54:33+00:00
I have the same experience and still use it. It's just that I learned to use it for simplistic work. I sometimes try to give it more complex tasks but it keeps failing. I don't think it's bad to keep trying, especially as people are reporting insane productivity gains.

After all, it's through failure that we learn the limitations of a technology. Apparently some people encounter that limit more often than others.
by gspr | 2026-02-11 14:54:52+00:00
Very good point! Thanks!

With the correction, it interestingly enough produces the good behavior also at size=2. It also delays SIMD until size=5. But then it bizarrely stops doing SIMD again after size=64.

https://godbolt.org/z/P979nY4nf

The iterator version stays SIMD-y also after size=64, but stops at some point. What?! I don't know enough to understand what's going on. Anyone?
by rapatel0 | 2026-02-11 14:55:31+00:00
Ah I think i understand. To paraphrase, you're saying that people that are caught tend to take refuge by more rightward grifting.

I cannot speak to your specific experience and i don't necessarily disagree. However, I do think there a potential selection bias here because by our media environment. Agree or not, the media believes that Trump is the most horrible person in the world at the moment. So there is a propensity to attack anyone that is considered allied to the right, so rightward grifters will get more aggressively exposed.
by fluidcruft | 2026-02-11 14:55:44+00:00
Latest update from NYT

> According to a social media post by the Secretary of Transportation, Sean Duffy, Mexican cartel drones breached U.S. airspace, prompting temporary closure of airspace over El Paso. The Defense Department took action to disable the drones, Mr. Duffy said. Another person familiar with the situation had described the cause of the shutdown as a test of anti-drone technology. It is unclear if the brief airport closure was directly related to the presence of drones or how the technology was deployed.

It does not seem implausible or unreasonable to me that an anti-drone system would trigger airspace restrictions when activated. Whether system activation is intended to put out a 10 days block is probably a different issue, but probably related to SOP for an event of unknown duration.
by rozab | 2026-02-11 14:56:00+00:00
I had the same issue when I first put up my gitea instance. The bots found the domain through cert registration in minutes, before there were any backlinks. GPTbot, ClaudeBot, PerplexityBot, and others.

I added a robots.txt with explicit UAs for known scrapers (they seem to ignore wildcards), and after a few days the traffic died down completely and I've had no problem since.

Git frontends are basically a tarpit so are uniquely vulnerable to this, but I wonder if these folks actually tried a good robots.txt? I know it's wrong that they ignore wildcards, but it does seem to solve the issue
by casey2 | 2026-02-11 14:56:42+00:00
"Fraud" has become a major political weapon since "Operation Chokepoint" and earlier (check wikileaks)

If the government is going to act irrationally and (through visa/mc) prevent legitimate transactions then people will just deal with fraud.

Even if Europeans agree with the DLsite ban they see the writing on the wall for European eCommerce sites.
by mopsi | 2026-02-11 14:57:22+00:00
> Imagine I came to you and said 'hey stickfigure not only with this war last for years, but in 4 years Russia will have the strategic initiative, control a massive chunk of Ukraine, and be continuing to push forward' -- what do you think you would have said? 'Russia must be failing' wouldn't really be a logical response then, or now.

If four years ago anyone had said that Russia would invade Ukraine with everything it got and that four years later it would still stuck fighting for the first eastern provinces, with casualties exceeding a million and no end in sight, they would've been dismissed as an insane doomer. And yet here we are.

The war against Ukraine is among the worst disasters in the entire military history of Russia, far worse than the 1979 invasion Afghanistan and the 1904 Russo-Japanese war, which until recently were regarded as the worst catastrophies. Notable Russian fascist Maxim Kalashnikov goes much further and calls it a "civilizational defeat", because the war will embed the rejection of anything Russian as a core part of Ukrainian identity: https://x.com/wartranslated/status/1985270960321130516
by ingenieroariel | 2026-02-11 14:57:23+00:00
With Apple devices you get very fast predictions once it gets going but it is inferior to nvidia precisely during prefetch (processing prompt/context) before it really gets going.

For our code assistant use cases the local inference on Macs will tend to favor workflows where there is a lot of generation and little reading and this is the opposite of how many of use use Claude Code.

Source: I started getting Mac Studios with max ram as soon as the first llama model was released.
by gruez | 2026-02-11 14:57:39+00:00
The reasoning against this seems questionable:

>Are they safer? Possibly, but they are not as well studied or regulated. According to Time,

>> …their natural sources of color do not necessarily mean that they are safer or free of potentially harmful compounds. Natural sources may be treated with pesticides and herbicides, and are also prone to contamination with bacteria and other pathogens…To strip natural products of these contaminants, manufacturers process them with various solvents—some of which could remain in the final coloring and contribute to negative health effects…[and] it generally takes more natural color than synthetic color to make the same shade in a final food.

I agree with the sentiment that "natural" doesn't imply something is healthy and consumers should be skeptical of it, but all of the objections exist for both naturally derived dyes (eg. beetroot red) and the underlying natural product (eg. beetroots), so it's hard to make a principled argument against allowing the natural label for the latter but not the former.
by netsharc | 2026-02-11 14:57:57+00:00
Last sentence of the article:

> Late-stage studies of Moderna’s experimental cancer vaccines are expected to continue unimpeded.

It'd be an incredible move if we stopped short of finding the cure for cancer, because we had to make America great again...

Disclaimer: above sentence is in jest, there are multitudes of bad mutations, all under the label "cancer". Also "great again" is not what's happening, it's a populist rallying cry designed to fool the public while a corrupt bunch of elites grift and wreck everything...
by KPGv2 | 2026-02-11 14:58:29+00:00
I had a quick check, and there were zero Americans on board this Malaysian aircraft shot down by a nuclear power over Ukraine, so I don't know how you think it's relevant to an American aircraft full of Americans being shot down in American airspace by cartels immediately on the other side of the American border.

EDIT: Unless you think Malaysia not bombing the Kremlin in retribution is somehow indicative of how America would respond to the situation we're actually talking about.
by jaccola | 2026-02-11 14:59:07+00:00
I have no idea how an LLM company can make any argument that their use of content to train the models is allowed that doesn't equally apply to the distillers using an LLM output.

"The distilled LLM isn't stealing the content from the 'parent' LLM, it is learning from the content just as a human would, surely that can't be illegal!"...
by KGKalalsmaa | 2026-02-11 14:59:18+00:00
You’re right — the “no capital required upfront” phrasing was misleading. That’s our mistake and we’re fixing it.

What we meant is: you don’t have to pre-deposit funds into a dedicated wallet with us. You can keep funds in your existing accounts (Kalshi, Polymarket, etc.), and when a trade is executed, we pull your portion at that time. For users who prefer, we can also custody funds and forward trades from there.

For lending specifically, you do need skin in the game. If we fund part of a trade, you’re funding part of it too. We’re not in the business of collecting trade ideas to copy or front-run — we’re a capital provider, not a prop desk.

Appreciate the pushback — the wording should have been clearer.
by BiteCode_dev | 2026-02-11 14:59:36+00:00
Firefox was always a geek thing, I've been using it since it was called phoenix and at its peak, it was mostly nerds installing that at schools, convincing their mums, etc, thanks to the adblock.

The only reason we are not all using edge is because google spend billions marketing Chrome in early 2000. They got the normies with brute forcing, because they could make money with it, not for making the world better.

Heck, they promoted google on the HOME PAGE of google search, an ad spot you can't even buy from google, with a pseudo notification, a format google uses for nothing else in ads.

They went full throttle.

But nobody is going to spend millions to promote decentralization. Because it's about concentrating less power.

HN has always been terrible at undertanding that, because while they argue about what browser to use, the average user can barely make the difference between an app and a website anyway.
by Romario77 | 2026-02-11 14:59:39+00:00
Notepad++ might be too much for a simple utility.

Plus for many years Word was one of the main cash cows for MS, so they didn't want to make an editor that would take away from Word.

And you could see how adding new things adds vulnerabilities. In this case they added ability to see/render markdown and with markdown they render links, which in this case allowed executing remote code when user clicks on a link.
by elil17 | 2026-02-11 14:59:46+00:00
That is not what this is about. You've always been able to advertise rice with turmeric as free from artificial colors. Here, the FDA is allowing for so-called natural dyes which are just chemicals that have been extracted from plants (usually through solvents). Imagine taking the turmeric, soaking it in gasoline, then distilling the color back out of the gasoline. The only requirement is that the color itself is not petroleum-derived.
by schiffern | 2026-02-11 14:59:48+00:00
>In the past, companies were generally only able to make such [no artificial color] claims when their products had no added color whatsoever — whether derived from natural sources or otherwise

So what is the word "artificial" doing here? Apparently it applies to the addition of color itself, not the source of the color?

This is extra confusing because on ingredients lists they distinguish between "natural colors" and "artificial colors." But apparently that's not the same sense that they're using "artificial" as when they say "no artificial colors??"

Seems like just fixing a confusing situation -- so confusing I didn't even know I was confused until just now!
by 10729287 | 2026-02-11 14:59:53+00:00
In my opinion, the example of the door is not very relevant, because it often forces the person behind to run to catch up with the door so that the person in front does not wait too long. For my part, I hold the door as long as possible while walking without turning around, so it is up to the person behind to decide whether or not to run, without putting too much pressure on them.
by notpushkin | 2026-02-11 14:59:57+00:00
> be scoped

Yes. Not usually user-controllable though.

> be forced to have a clear non-obfuscated feed

Kinda. You can usually open a devtools instance that shows whatever the extension is doing. But you can’t enforce it to not obfuscate the network requests though (you’d have to make extensions non-Turing complete).

You could mitigate some of these issues by vetting the extensions harder before letting them into the stores. Mozilla requires all extensions to have a readable source code, for example.
by bryanlarsen | 2026-02-11 15:00:04+00:00
One way to use AI to speed up your projects:

Let your Support/QA/Sales engineers use AI to create features / fix bugs. They're closer to the customer than your developers are.

Even if what they deliver is complete AI slop and has to be rewritten, that pull request is a far better specification of what customers actually want than the ticket you used to get.

Too bad you fired all your QA/support engineers a few years ago.
by exfalso | 2026-02-11 15:00:42+00:00
> Maybe when AIs are able to say: "I don't know how this works" or "This doesn't work like that at all." they will be more helpful.

Funny you say that, I encountered this in a seemingly simple task. Opus inserted something along the lines of "// TODO: someone with flatbuffers reflection expertise should write this". I actually thought this was better than I anticipated even though the task was specifically related to fbs reflection. And it was because I didn't waste more time and started to rewrite from scratch.
by cameldrv | 2026-02-11 15:01:05+00:00
Doing a closure up to 18k feet is common because that's where class A airspace starts, i.e. you need a clearance to go there, you can't just fly around VFR wherever you want. The airspace above 18k might not be officially closed, but controllers can be instructed to just not give a clearance into whatever area they deem is unsafe on a particular day.
by t312227 | 2026-02-11 15:01:56+00:00
hello,

as always: imho. (!)

idk ... i just put a http basic-auth in front of my gitweb instance years ago.

if i really ever want to put git-repositories into the open web again i either push them to some portal - github, gitlab, ... - or start thinking about how to solve this ;))

just my 0.02€
by tsimionescu | 2026-02-11 15:02:00+00:00
I can't for the life of me understand why people think it's OK to send and even expect plaintext email in 2026. There's so much content that requires formatting and non-Unicode support in order to make sense. Formatted text, lists, in-line graphs or images, tables, equations or other mathematical formulae, all of these benefit from a controlled layout that plaintext just doesn't offer or can barely approximate. Why would you limit your email communication like this?