MurphyA/hacker-news huggingface dataset:
by Spooky23 | 2026-02-06 04:40:12+00:00
Most more professional environments use VPN and bastion hosts for this purpose.

SSH is a risk because you’re trusting the users and client to not be idiots or get compromised. In general, people tend to do stupid things. If it’s just you and your server, potentially a different story.

It’s like sharing secrets with people, the more who are involved, the less likely the secret will be kept.
by anttiharju | 2026-02-06 04:40:47+00:00
Github being less and less reliable nowadays just makes this more true.

In the past week I have seen:

- actions/checkout inexplicably failing, sometimes succeeding on 3rd retry (of the built-in retry logic)

- release ci jobs scheduling _twice_, causing failures, because ofc the release already exists

- jobs just not scheduling. Sometimes for 40m.

I have been using it actively for a few years and putting aside everything the author is saying, just the base reliability is going downhill.

I guess zig was right. Too bad they missed builtkite, Codeberg hasn't been that reliable or fast in my experience.
by __turbobrew__ | 2026-02-06 04:41:37+00:00
Honestly, that is a “skill issue” as the kids these days say. When used properly and with skill, agents can increase your productivity. Like any tool, use it wrong and your life will be worse off. The logically consistent view if you want to believe this study and my experience is that the average person is hindered by using AI because they do not have the skills, but there are people out there who gain a net benefit.
by burnt-resistor | 2026-02-06 04:41:47+00:00
Thanks for this, author.

No https:// and no cryptographic signature nor checksum that I can see. This makes it almost trivial for any nation-state to inject malware into targeted machines.

I removed AMD auto-update functionality from Windows boxen. (And I won't install anything similar on Linux.) And, besides, the Windows auto-update or check process hangs with a blank console window regularly.

Such trashy software ruins the OOBE of everything else. Small details attention zen philosophy and all that.
by MarkMarine | 2026-02-06 04:42:02+00:00
A Claude max 20x plan and you’ll be fine. I’d been doing my normal process of running 4 Claude sessions in parallel because that was about the right amount of concurrent sessions for me to watch what’s going on and approve/deny plans and code… and this blows it out of the water. With an agent swarm it’s so fast at executing and testing I’m limited by my idea and review capabilities now. I tried running 2 and I can’t keep up, I’m defining specs and the other window is done, tested, validated and waiting for me.
by man8alexd | 2026-02-06 04:42:03+00:00
> There is no penalty for giving a system too much swap (apart from disk space)

There is a huge penalty for having too much swap - swap thrashing. When the active working set exceeds physical memory, performance degrades so much that the system becomes unresponsive instead of triggering OOM.

> Monitor it occasionally, particularly if your system slows down.

Swap doesn't slow down the system. It either improves performance by freeing unused memory, or it is a completely unresponsive system when you run out of memory. Gradual performance degradation never happens.

> give your system so much swap you are sure it exceeds the size of stuff that's running but not used. 4Gb is probably fine for a desktop.

Don't do this. Unless hibernation is used, you only need a few hundred megabytes of free swap space.
by Mikhail_Edoshin | 2026-02-06 04:42:18+00:00
16 bytes is a lot. 4 bytes are within reach, we can scan all of them quickly, but even 8 bytes are already too much.

Kolmogorov said that computers do not help with naturally hard tasks; they raise a limit compared to what we can fo manually, but above that limit the task stays as hard is it was.
by pmontra | 2026-02-06 04:43:44+00:00
> But Everyone Uses It!

All of my customers are on bitbucket.

One of them does not even use a CI. We run tests locally and we deploy from a self hosted TeamCity instance. It's a Django app with server side HTML generation so the deploy is copying files to the server and a restart. We implemented a Capistrano alike system in bash and it's been working since before Covid. No problems.

The other one uses bitbucket pipelines to run tests after git pushes on the branches for preproduction and production and to deploy to those systems. They use Capistrano because it's a Rails app (with a Vue frontend.) For some reason the integration tests don't run reliably neither on the CI instances nor on Macs, so we run them only on my Linux laptop. It's been in production since 2021.

A customer I'm not working with anymore did use Travis and another one I don't remember. That also run a build on there because they were using Elixir with Phoenix, so we were creating a release and deploying it. No mere file copying. That was the most unpleasant deploy system of the bunch. A lot of wasted time from a push to a deploy.

In all of those cases logs are inevitably long but they don't crash the browser.
by zdw | 2026-02-06 04:44:21+00:00
I tend to disagree with this as it seems like an ad for Nix/Buildkite...

If your CI invocations are anything more than running a script or a target on a build tool (make, etc.) where the real build/test steps exist and can be run locally on a dev workstation, you're making the CI system much more complex than it needs to be.

CI jobs should at most provide an environment and configuration (credentials, endpoints, etc.), as a dev would do locally.

This also makes your code CI agnostic - going between systems is fairly trivial as they contain minimal logic, just command invocations.
by sutterd | 2026-02-06 04:44:36+00:00
I thought Opus 4.5 was an incredible quantum leap forward. I have used Opus 4.6 for a few hours and I hate it. Opus 4.5 would work interactively with me and ask questions. I loved that it would not do things you didn't ask it to do. If it found a bug, it would tell me and ask me if I wanted to fix it. One time there was an obvious one and I didn't want it to fix it. It left the bug. A lot of modesl could not have done that. The problem here is that sometimes when model think is a bug, they are breaking the code buyu fixing it. In my limited usage of Opus 4.6, it is not asking me clarifying questions and anything it comes across that it doesn't like, it changes. It is not working with me. The magic is gone. It feels just like those other models I had used.

I will try again tomorrow and see how it goes.
by octate | 2026-02-06 04:44:40+00:00
Hi HN, I’m the builder of Anonisor.

I started working on this after repeatedly seeing platforms forced to collect emails or identities just to fight spam and abuse. That tradeoff always felt unnecessary.

Anonisor explores separating verification from identity. Platforms can confirm user legitimacy using non-identifying tokens, without storing personal data.

It’s early, and I’m here for honest feedback, edge cases, and criticism. Happy to answer technical or product questions.

https://anonisor.com
by MaskRay | 2026-02-06 04:44:56+00:00
git switch v6.9

The riscv build succeeded. For the x86-64 build I ran into

% make O=/tmp/linux/x86 ARCH=x86_64 CC=/tmp/p/claudes-c-compiler/target/release/ccc-x86 HOSTCC=/tmp/p/claudes-c-compiler/target/release/ccc-x86 LDFLAGS=-fuse-ld=bfd LD=ld.bfd -j30 vmlinux -k
make[1]: Entering directory '/tmp/linux/x86'
...
CC arch/x86/platform/intel/iosf_mbi.o
ccc: error: lgdtl requires memory operand
AR arch/x86/platform/intel-mid/built-in.a
make[6]: *** [/home/ray/Dev/linux/scripts/Makefile.build:362: arch/x86/realmode/rm/wakeup_asm.o] Error 1
ld.bfd: arch/x86/entry/vdso/vdso32/sigreturn.o: warning: relocation in read-only section `.eh_frame'
ld.bfd: error in arch/x86/entry/vdso/vdso32/sigreturn.o(.eh_frame); no .eh_frame_hdr table will be created
ld.bfd: warning: creating DT_TEXTREL in a shared object
ccc: error: unsupported pushw operand

There are many other errors.

tinyconfig and allnoconfig have fewer errors.

RELOCS arch/x86/realmode/rm/realmode.relocs
Invalid absolute R_386_32 relocation: real_mode_seg

Still very impressive.
by jsdev12321 | 2026-02-06 04:44:58+00:00
Hi HN! I'm a high school student and I built Atomiqa, a free iOS app that uses AR to visualize chemistry molecules.

The key feature: point your camera at any chemical formula (in textbooks, notes, worksheets) and it instantly renders an accurate 3D molecular structure with real bond geometry. You can then place it in AR, walk around it, and examine it from any angle.

I made this because I was struggling to visualize molecular structures in organic chemistry. Most AR chemistry apps require you to manually select molecules from a list, but I wanted something faster for studying - just scan and see.

Also includes an interactive periodic table and supports hundreds of molecules from simple to complex.

It's completely free on iOS. Would love feedback from the HN community!
by vineyardmike | 2026-02-06 04:45:38+00:00
California (the titular state) is not right-to-work, so you can be forced to pay dues, but this does NOT extend to public sector jobs. Reread the article knowing that the wealthy VC's initial premise is flawed from the start. They meekly mention this reality at the end, ignoring the agency employees have had to choose to be in their union or not. The author is also very politically involved, and unions serve as a political force against his own PACs and interests.

This whole thing is just more wealthy business owners trying to turn the public against unions, which is an effort as old as unions.

> The Real Fight: Public Sector vs. Private Sector Unions

They claim the "Real" fight is against public sector unions, but largely blame private unions (eg. teamsters vs Waymo) in their examples.

> It’s a very bad thing for California to be the innovation center of the world and Golden Goose of the state while simultaneously the biggest, most powerful special interests want to destroy it.

Public sector jobs, respectfully, are not California's center of innovation. Again, bad-faith arguing.
by jandrewrogers | 2026-02-06 04:46:19+00:00
When I was in my 20s I worked for a well-known global telco. In our office, we had a group of people whose literal job was watching streaming porn from around the world all day. They had walls of screens running simultaneously.

Those streams were customers. Our people’s job was to monitor the streams for video and audio quality issues. When I would tell my friends that I worked with guys who’s literal job was watching porn on a sofa all day, they thought it must be the best job in the world.

But when I talked to the guys that actually had the job, they said it was a terribly boring chore. Even worse, they said you quickly become so desensitized that it bled over into their non-work life in a negative way. Almost everyone that had that job eventually grew to hate it.

These kinds of jobs have always existed. To some extent someone needs to do it. While we may be outsourcing it now, there is a long history of paying people in the US to do it.
by moregrist | 2026-02-06 04:46:35+00:00
> When was the last time you reviewed the machine code produced by a compiler? ...

Any time I’m doing serious optimization or knee-deep in debugging something where the bug emerged at -O2 but not at -O0.

Sometimes just for fun to see what the compiler is doing in its optimization passes.

You severely limit what you can do and what you can learn if you never peek underneath.
by neilbb | 2026-02-06 04:47:42+00:00
I believe this is the most pragmatic approach for real production-ready multi-agent software engineering. Most frameworks are either theoretical or over-engineered—they try to automate humans away instead of augmenting them.

The key difference: on-demand human-in-the-loop. Agents never block waiting for you. They pick up work, execute, commit, and exit. You make decisions asynchronously when ready.

This eliminates the biggest bottleneck in agent systems—the human becoming a serial dependency.

Proof isn't in benchmarks or simulation. It's 706 commits shipped in 5 days using standard tools (Taskwarrior, Zellij, Claude Code). System got rate-limited, not me.
by harikb | 2026-02-06 04:48:45+00:00
Ian Duncan, I was imagining you on a stage delivering this as a standup comedy show on Netflix.

My pet peeve with Github Actions was that if I want to do simple things like make a "release", I have to Google for and install packages from internet randos. Yes, it is possible this rando1234 is a founding github employee and it is all safe. But why does something so basic need external JS? packages?
by permo-w | 2026-02-06 04:48:51+00:00
I think it's perfectly reasonable to have distaste for farming out unpleasant work to poorer countries. But also I think it's perfectly reasonable to accept that it's a fact of life and realise that it's literally redirecting wealth from the richest companies in the world to some of the poorer people in the world.

I'm more bothered by the fact that once again an article focuses on the plight of an identity deemed oppressed rather than broader concern for working classes. All it does is sell it as pandering rather than exposing a genuine issue. And as usual from the post-modern left, dividing rather than uniting. The article's entire justification for this is the absolute cop-out: >Women form half or more of this workforce.

As another example, I read an article the other day complaining about an advertising campaign from a colossal multinational company replacing the "o"s in London tube stop names with "0.0"s. Why? Not because of excessive corporate encroachment into public spaces, but because it might be confusing for disabled people. Maybe it would be, but once again the broader problem of capitalist overreach is ignored in favour of identity. Corporate exploitation is fine as long as it doesn't impact people who aren't able white men
by LiamPowell | 2026-02-06 04:49:03+00:00
> Compilers will produce working output given working input literally 100% of my time in my career.

In my experience this isn't true. People just assume their code is wrong and mess with it until they inadvertently do something that works around the bug. I've personally reported 17 bugs in GCC over the last 2 years and there are currently 1241 open wrong-code bugs.

Here's an example of a simple to understand bug (not mine) in the C frontend that has existed since GCC 4.7: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105180
by __turbobrew__ | 2026-02-06 04:49:11+00:00
I don’t write frontend stuff, but sometimes need to fix a frontend bug.

Yesterday I fed claude very surgical instructions on how the bug happens, and what I want to happen instead, and it oneshot the fix. I had a solution in about 5 minutes, whereas it would have taken me at least an hour, but most likely more time to get to that point.

Literally an hour or two of my day was saved yesterday. I am salaried at around $250/hour, so in that one interaction AI saved my employer $250-500 in wages.

AI allows me to be a T shaped developer, I have over a decade of deep experience in infrastructure, but know fuck all about front end stuff. But having access to AI allows me as an individual who generally knows how computers work to fix a simple problem which is not in my domain.
by vrks5331 | 2026-02-06 04:49:16+00:00
Location: NYC Area, USA
Remote: Yes
Willing to relocate: Not preferable
Technologies: Java, Python, SQL, Dart, Python Libraries (TensorFlow, Pandas, NumPy, PyTorch, Scikit-learn, Matplotlib, etc.), Flutter, React Native, Node.js, Cursor, LLM APIs
Resume: https://www.overleaf.com/read/tkcjghnsdyyv#3204d5
Email: srivem8707@gmail.com
by habosa | 2026-02-06 04:49:24+00:00
Dead on. GitHub Actions is the worst CI tool I’ve ever used (maybe tied with Jenkins) and Buildkite is the best. Buildkite’s dynamic pipelines (the last item in the post) are so amazingly useful you’ll wonder how you ever did without them. You can do super cool things like have your unit test step spawn a test de-flaking step only if a test fails. Or control test parallelism based on the code changes you’re testing.

All of that on top of a rock-solid system for bringing your own runner pools which lets you use totally different machine types and configurations for each type of CI job.

Highly, highly recommend.
by supersing | 2026-02-06 04:51:36+00:00
Anti-cheat drivers have indeed turned out to be major security risks on Windows. But I think the blame should not be on game developers because kernel-mode anti-cheat is still one of the only methods that’s reasonably effective — and realistically, you can’t expect every game studio to have the expertise to write secure, reliable kernel drivers.

If Microsoft wants Windows to be more stable and secure, they should provide built-in anti-cheat support in the OS. That would reduce the need for third-party kernel drivers in the first place.
by onyx_writes | 2026-02-06 04:52:32+00:00
The honest position seems underrepresented here: we don't have tools to know what "counts" as experience. Brains are physics too — the question is which configurations matter, and we can't explain why we ourselves aren't philosophical zombies.

The paper is interesting not for proving LLMs suffer, but for showing they have structured internal dynamics that correlate with psychological constructs. Whether correlation implies anything about subjective states is the hard problem. We can't skip it by declaring "just linear algebra" or "obviously sentient."
by BoorishBears | 2026-02-06 04:53:17+00:00
I know this is off topic, but that homepage is a piece of work: https://buildkite.com

I get it's quirky, but I'm at a low energy state and just wanted to know what it does...

Right before I churned out, I happened to click "[E] Exit to classic Buildkite" and get sent to their original homepage:
https://buildkite.com/platform/

It just tells you what it Buildkite does! Sure it looks default B2B SaaS, but more importantly it's clear. "The fastest CI platform" instead of some LinkedIn-slop manifesto.

If I want to know why it's fast, I scroll down and learn it scales to lots of build agents and has unlimited parallelism!

And if I wonder if it plays nice with my stack, I scroll and there's logos for a bunch of well known testing frameworks!

And if I want to know if this isn't v0.0001 pre-alpha software by a pre-seed company spending runway on science-fair home pages, this one has social proof that isn't buried in a pseudo-intellectual rant!

-

I went down the rabbit hole of what lead to this and it's... interesting to say the least.

https://medium.com/design-bootcamp/nothing-works-until-you-m...

https://www.reddit.com/r/branding/comments/1pi6b8g/nothing_w...

https://www.reddit.com/r/devops/comments/1petsis/comment/nsm...
by dfinejewelry | 2026-02-06 04:53:48+00:00
Nature-inspired elegance meets timeless romance in this oval-cut moss agate ring crafted from 925 sterling silver with rose gold rhodium plating.
Delicate leaf and vine details symbolise growth and lasting love, while AAA cubic zirconia accents add subtle sparkle.
A unique, handcrafted design ideal for engagements, promises, or meaningful gifting.
by luisgvv | 2026-02-06 04:55:36+00:00
I was using it the same way you just described but for C# and Angular and you're spot on. It feels amazing not having to memorize APIs and just let the AI even do code coverage near to 100%, however at some point I began noticing 2 things:

- When tests didn't work I had to check what was going on and the LLMs do cheat a lot with Volkswagen tests, so that began to make me skeptic even of what is being written by the agents

- When things were broken, spaghetti and awful code tends to be written in an obnoxius way it's beyond repairable and made me wish I had done it from scratch.

Thankfully I just tried using agents for tests and not for the actual code, but it makes me think a lot if "vibe coding" really produces quality work.
by namelosw | 2026-02-06 04:55:38+00:00
This hasn't been my experience either. I personally find the max plan is very generous for day-to-day usage. And I don't even use compact manually.

However, when I tried out the SuperPower skill and had multiple agents working on several projects at the same time, it did hit the 5-hour usage limit. But SuperPower hasn't been very useful for me and wastes a lot of tokens. When you want to trade longer running time for high token consumption, you only get a marginal increase in performance.

So people, if you are finding yourself using up tokens too quickly, you probably want to check your skills or MCPs etc.
by stevage | 2026-02-06 04:55:46+00:00
I guess everything is relative and I'm well informed on everything but no, "first new car company in America in a long time" doesn't leap out as a wildly difficult challenge in a time of great innovation. It was followed a couple of years later by Rivian.

First popular electric car...maybe hindsight helps, but it was kind of a matter of time with battery technology improving, although certainly they did a very good job.

Both difficult, for sure, but not quite as mind-blowingly impossible sounding as reusing a rocket dozens of times. To me.
by lelanthran | 2026-02-06 04:56:48+00:00
> > It cost $20,000

> I'm curious - do you have ANY idea what it costs to have humans write 100,000 lines of code???

I'll bite - I can write you an unoptimised C compiler that emits assembly for $20k, and it won't be 100k lines of code (maybe 15k, the last time I did this?).

It won't take me a week, though.

I think this project is a good frame of reference and matches my experience - vibing with AI is sometimes more expensive than doing it myself, and always results in much more code than necessary.
by datsci_est_2015 | 2026-02-06 04:57:07+00:00
Okay I think this somewhat answers my question. Is this individual a solo developer? “Triaging GitHub issues” sounds a bit like open source solo developer.

Guess I’m just desperate for an article about how organizations are actually speeding up development using agentic AI. Like very practical articles about how existing development processes have been adjusted to facilitate agentic AI.

I remain unconvinced that agentic AI scales beyond solo development, where the individual is liable for the output of the agents. More precisely, I can use agentic AI to write my code, but at the end of the day when I submit it to my org it’s my responsibility to understand it, and guarantee (according to my personal expertise) its security and reliability.

Conversely, I would fire (read: reprimand) someone so fast if I found out they submitted code that created a vulnerability that they would have reasonably caught if they weren’t being reckless with code submission speed, LLM or not.

AI will not revolutionize SWE until it revolutionizes our processes. It will definitely speed us up (I have definitely become faster), but faster != revolution.
by pclmulqdq | 2026-02-06 04:58:35+00:00
> Probably not long. I might also make it clear I'm not a fan, but at the end of the day, they're generally within their rights to record me in public. Sucks, but not much I can do.

You should not test this. If you record someone for hours or days in public, you may find yourself with a restraining order, a ticket for stalking (or assault), or a civil suit for invasion of privacy or IIED or something similar. This depends on the jurisdiction and the person you are recording, but what you are citing about not having an expectation of privacy is mostly meant with regards to point-in-time instances (one photo), not ongoing continuous surveillance.

Yes, the only distinction between any and all of these things and a legal recording is the length of time and the invasiveness of the collection of data. No, there is no bright line where you are definitely guilty or definitely safe (few things in law have one).