MurphyA/hacker-news huggingface dataset:
by hunterpayne | 2026-02-21 10:14:01+00:00
Don't comment on topics you know nothing about. Nothing this guy did is illegal in the US. Everything this guy did followed standard procedures for reporting security issues. The company apparently didn't understand anything about running a secure software operation and did everything wrong. And there in lies the problem. Without civil penalties for this type of bad behavior, then it will continue. In the US, a lawyer doing this would risk disbarment as this type of behavior dances on the edge of violating whistleblower laws.
by maxloh | 2026-02-21 10:14:30+00:00
Yeah, they're Apache 2.0. That's how Android and some of its forks handle licensing.

For example, most repos in LineageOS's GitHub org lack a global LICENSE file. Instead, licensing is specified on a file-by-file basis within the comment headers.

This does lead to some ambiguity though. You can't put a license header into binary files like PNGs. In those cases, you can only trust that Google won't sue you for using them.
by sylware | 2026-02-21 10:14:37+00:00
And noscript/basic (x)html for web sites? They broke them to force the usage of whatng cartel web engines (or they were incompetent and/or malicious).

At least on critical sites.

GAFAM and big tech do not like protocols and file formats simple and able to do good enough job that stable in time, because you would not need the software they control.
by tosh | 2026-02-21 10:14:48+00:00
gForth [0] is great for getting started

if you are working with specific hardware (e.g. microcontrollers) it depends on which forth dialects are available but for the raspberry pico and pico 2 I recently found zeptoforth [1]

or you know you can always bootstrap your own :)

[0] https://gforth.org
[1] https://github.com/tabemann/zeptoforth
by aidos | 2026-02-21 10:15:33+00:00
It’s pretty hard to keep the commits in a working branch in a good legible state - certainly it takes work to do it.

In 25 years of professional development I’ve never really had a situation where the commits on a branch would have helped me understand what was going on a year ago when the work was done. That includes pretty big bits of project work.

I’d much rather have a trunk with commits at the granularity of features.
by ahartmetz | 2026-02-21 10:16:55+00:00
I think Gerrit has something like stacked PRs - and incidentally it's used for Chromium and was created for running its own public open source projects by Google. It's also used by the Qt project, which is where I sometimes use it.

Gerrit looks ugly and is not very easy to use at first, but at least it's not slow like GitLab and GitHub.
by BrenBarn | 2026-02-21 10:17:57+00:00
The LA Times had an article about this too: https://www.latimes.com/california/story/2026-02-18/mark-zuc...

It includes this gem:

> According to a study last year by the nonpartisan Pew Research Center, the overwhelming majority of American adults have an unfavorable view of Zuckerberg.

> The percentage of adults who view him very favorably is on par with the share who believe the Earth is flat or that aliens live among us.

(The study is linked from the article: https://www.pewresearch.org/short-reads/2025/02/19/how-ameri... .)
by imiric | 2026-02-21 10:18:07+00:00
How are weather apps still relevant, let alone profitable enough to build a company around? This problem has been solved years ago. All the app needs to do is hook up to one or more data providers, and show some stats and pretty graphs. It's essentially a read-only frontend to an API. There are plenty of options to choose from on every platform, including not using an app at all.

The features this ad promotes all seem like solutions to nonexistent problems. "Alternate possible futures" don't give me any more confidence in the forecast—it just shows that it's not reliable, which everyone should know already. "Community reports" just add another layer of uncertainty. How can I trust that someone's report is valid or up-to-date, or that it applies to my area? Maps are nice and visually interesting, but this is not exactly novel. Notifications? No thanks. A weather app "should be fun"? Huge no thanks. Privacy and trust? Why do you collect any data?? Unbelievable.
by adriel_d | 2026-02-21 10:18:25+00:00
I’m using a recursive cascade IIR topology with pretty strict headroom management. Because cascade gains are additive, I re-stage the chain: increase preamp headroom, spread high-energy formant shaping across narrower bands, and tighten Q to reduce cross-band interaction.
The goal is phase-consistent transients without the summation artifacts you tend to get from envelope-style blending.
by ksynwa | 2026-02-21 10:20:47+00:00
I only have one Apple devices (an iPad) but from what I seen the subscription is popular on it. I wanted to use Infuse, a video player, for my Jellyfin server but the lifetime price was $100 or a $2/month subscription. Also was interested in Panels, a comic book reader, for my Komga server. Panels was more reasonably priced ($20 for all updates to the current major version) but it also a subscription tier at $1.5/month.
by tialaramex | 2026-02-21 10:21:07+00:00
Given that the current system maximises partisan bias, it's actually hard to do worse.

Ideally you'd want to reform this hierarchically, but supposing we can only fix that final court, you want say a committee consisting of roughly a couple of academics who've taught this stuff, a couple of real on-the-ground attorneys who've argued before this court, a couple of retired judges from this court (if it had age limits, but today it does not) or the courts below it who've done this job, and five otherwise unconnected citizens (no specific business before any court now or expected) chosen at random the way most countries pick their juries.

That committee is to deliver a list of several people best qualified to fill any vacancies on the court which arise before the next committee does the same, if such a vacancy arises you just go down the list.
by vkou | 2026-02-21 10:21:53+00:00
Correct. The difference between FPTP and PR systems (Or countries with very strong regional parties) is that in a multi-party PR system, the coalition happens between party, in a FPTP two-party system, the coalition happens within the big tentpole parties.

There are many reasons for why two-party FPTP sucks, but this phenomena is present in multi-party systems, too. And, of course, sometimes politicians end up crossing the aisle, much to the chagrin of the party whip.
by ifwinterco | 2026-02-21 10:22:13+00:00
Is funny reading this from the UK because this ship sailed here years ago, you just have to assume if you drive a car anywhere except small roads in the countryside you are potentially being tracked by ANPR.

Of course, actual serious criminals who are actively committing serious crimes just use fake plates so they aren't affected, it only really helps catch people who commit crimes on the spur of the moment (while also obviously eroding every "normal" person's privacy)
by mattlondon | 2026-02-21 10:22:31+00:00
I think for me it is an agent that runs on some schedule, checks some sort of inbox (or not) and does things based on that. Optionally it has all of your credentials for email, PayPal, whatever so that it can do things on your behalf.

Basically cron-for-agents.

Before we had to go prompt an agent to do something right now but this allows them to be async, with more of a YOLO-outlook on permissions to use your creds, and a more permissive SI.

Not rocket science, but interesting.
by hinkley | 2026-02-21 10:23:43+00:00
I have decided that the “start investing early for compound interest” advice is actually a very clever white lie told to young adults everywhere.

The point of starting early is not compound interest. It’s to experience loss when you still have a pittance in the market. The older you get the bigger the chunk of cash you can put in, and if you don’t understand Let it Ride and rebalancing before 20% is a loss of thousands instead of hundreds of dollars, you’re gonna have a bad time.

The only compound interest that really matters is what you get when you have a substantial stake that you also haven’t blown up chasing fads or snake oil. So the advice is technically true but also technically beside the point.
by mft_ | 2026-02-21 10:24:33+00:00
I think we’re in a similar place. I invested enough time over several years to understand the quirks and avoid the frustrations of a certain CAD package (allegedly, possibly Solidworks).

And it’s now helpful to remind myself, each time I find FreeCAD difficult or clunky, of all of those times that Solidworks was also, just in different ways. Or the time that Fusion lost a whole part of a model. Or the lack of a parametric history in lots of other competitors. Or the awfulness of trying to refer to specific parts of a model in progress of OpenSCAD. And so on…
by _pdp_ | 2026-02-21 10:25:11+00:00
You can take any AI agent (Codex, Gemini, Claude Code, ollama), run it on a loop with some delay and connect to a messaging platform using Pantalk (https://github.com/pantalk/pantalk). In fact, you can use Pantalk buffer to automatically start your agent. You don't need OpenClaw for that.

What OpenClaw did is to show the messages that this is in fact possible to do. IMHO nobody is using it yet for meaningful things, but the direction is right.
by moho | 2026-02-21 10:25:44+00:00
The author got banned from github and gitlab after DMCA takedowns. The code used to be available in those, but I guess he got tired of starting over?

Anyway, extensions are just signed zip files. You can extract them and view the source. BPC sources are not compressed or obfuscated. The extension is evaluated and signed by Mozilla (otherwise it wouldn't install in release-channel Firefox), if you put any stock in that.
by rerdavies | 2026-02-21 10:27:41+00:00
Excellent example. I do actually remember that part as being particularly cringeworthy. The IBM PC Technical Reference Manual also included complete schematics for the motherboard as well.

And, as an added bonus, as a hardware guy would know that you could read back the contents of an EPROM using the software that controls your EPROM burner (not an expensive piece of equipment). So that excuse doesn't fly either.
by oenton | 2026-02-21 10:28:30+00:00
> The one where he specifically told people to protest peacefully?

I know the rules say to assume good faith but I don't see how anyone can do that given what you wrote. I'm really struggling to understand how that is your main takeaway from all the events that transpired that day.

But rather than rehash that maybe it's better to focus on current events. What are your thoughts on Trump, the first day assuming office in his second term, issuing a blanket pardon for all of the crimes his supporters committed that day in his name? Why would Trump who just wanted people to "protest peacefully," pardon those convicted of... beating officers with a flag pole, stomping on officers' heads, and crushing an officer in a metal door frame using a riot shield?

I do agree with you on one thing though:

> it's like they're living in another world

It truly saddens me to see so many people living in completely different realities. But I honestly don't think it's me or the person you're replying to that decided to relocate.
by mittermayr | 2026-02-21 10:29:17+00:00
I wonder how long it'll take (if it hasn't already) until the messaging around this inevitably moves on to "Do not self-host this, are you crazy? This requires console commands, don't be silly! Our team of industry-veteran security professionals works on your digital safety 24/7, you would never be able to keep up with the demands of today's cybersecurity attack spectrum. Any sane person would host their claw with us!"

Next flood of (likely heavily YC-backed) Clawbase (Coinbase but for Claws) hosting startups incoming?
Show HN: Go Implementation of Systemd Time
by allddd | 2026-02-21 10:30:17+00:00
Hi, over the last few months I've been writing a Go package that parses systemd time formats because none of the packages I found were both flexible and fast enough for my use case.

The spec (https://www.freedesktop.org/software/systemd/man/latest/syst...) is more complex than it looks, so it took me way longer than expected to get it working properly. Right now it can only parse time spans and timestamps. I plan to add support for calendar events since I’d like to cover the full spec, but it’s lower prio because I don’t need it myself. If anyone wants to play with it, contributions are welcome :)
by lloeki | 2026-02-21 10:30:37+00:00
In 25 years of professional development I have several counter examples where some bit was either a trivial git revert of a single commit - among multiple ones in a branch - away, or an absolute pain because the squash-merge commit had flattened too many concerns together, concerns that were perfectly split in the topic branch but that branch was long gone by virtue of being auto-deleted on PR merge.

Coincidentally, every single squash-merge commit advocate I've had the unfortunate debate with was a regular practitioner of public tmp / tmp / try again / linter / tmp / fix / fix / haaaaaands commits.

Note that I'm not against squashing/history rewriting e.g rebase -i and stuff (which I'm a heavy user of so as to present sensible code aggregation reviewable per-commits), only squash-merge.
by Gehinnn | 2026-02-21 10:31:30+00:00
I just completed the formal verification of my bachelor thesis about real time cellular automata with Lean 4, with heavy use of AI.

Over the past year, I went from fully manual mode (occasionally asking chat gpt some Lean questions) to fully automatic mode, where I barely do Lean proofs myself now (and just point AI to the original .tex files, in German).
It is hard to believe how much the models and agentic harnesses improved over the last year.

I cannot describe how much fun it is to do refactorings with AI on a verified Lean project!

Also, it's so easy now to have visualizations and typesetted documents generated by AI, from dependency visualizations of proofs using the Lean reflection API, to visual execution traces of cellular automatas.
Ask HN: Best file format for AI reports output?
by azkalam | 2026-02-21 10:31:42+00:00
I want to use LLMs to construct reports. These reports will be of varying quality so I need to do a few rounds of QA (LLMs and human reviewers). So I need a format that is good for both feeding into a model and rendering as HTML.

Markdown makes sense but if I add rich media like images it won't be a self contained file.

Markdown is versatile enough to contain tables, images, headings etc. It also has low token overhead.

How can Markdown handle page breaks?

PDF is self contained but I want a tighter format that is quick to pull text and images from.

HTML is interesting, but again I want a restricted feature set - no JavaScript etc.

I am currently thinking about using zips containing Markdown files and image assets.

What are people reaching for in this space?
by drysart | 2026-02-21 10:32:38+00:00
> And the FAA won't become involved unless you're pointing them skyward.

The point here is that 'skyward' is where the laser's beam goes when you're trying to aim it at a camera up on a pole. It's practically impossible to point a non-fixed position laser at something a non-trivial distance higher than you without spilling a large amount of laser beam into whatever happens to be behind your intended target; which is very often the sky.
by Smalltalker-80 | 2026-02-21 10:33:20+00:00
Agreed.
I'm over 50, so I'm 'allowed' to use FB ;-),
for those few posts of the last remaining family and friends there.
Using FBP, I only see new posts of friends in chronological order.
But FB still f*cks you, because it does not show all updates of everyone.
When the algo decides you've had enough, you simply reach the 'end' of your feed.
Well when FB, sessions keep getting shorter and shorter...
There are some EU laws in the making that might change things, though.
by ddtaylor | 2026-02-21 10:35:08+00:00
> Basically, the moment you knew they were allocating account IDs monotonically and with a default password was the moment you had a vulnerability that you could report without fear of prosecution

That logic is garbage and assumes there is some arbitrary point at which a user should magically know the difference between a few IDs happening to be near each other versus a system wide problem. The law would use the interpretations of "knowingly", "intent" and in this case "reasonable".
by mentalgear | 2026-02-21 10:35:09+00:00
I agree with many of your points, but I think it can be effective depending on a) the details, b) at what time/type of government it is introduced.

As an example: "freedom of speech" is obviously a good thing, especially if a government becomes more authoritarian, however it can also become one of your society's biggest weaknesses by allowing, especially in the digital space, actors to use that freedom to make just any unfounded statements about anything and anyone leading to a collapse of the basic trust in society (there's a certain power that used this playbook to great success in regard to post truthismus). If instead, a still democratic government would have changed it to, you "freedom of speech - within the limits of what you can prove", that would have kept society on a much more safe lane instead of spiralling out of control through SM (social media) pushed absurdity.
by dguest | 2026-02-21 10:35:13+00:00
cutting out quite a bit from section 11:

---

A portable battery shall be ... removable by the end-user ... with the use of commercially available tools, without requiring the use of specialised tools, unless provided free of charge with the product, proprietary tools, thermal energy, or solvents to disassemble the product.

Any ... person that [markets] products incorporating portable batteries shall ensure that those products are accompanied with instructions ...

---

in other words you need to either make it easy and safe with standard tooling or include the tools people need.

Waterproof products are also specifically exempt.
by tokenless | 2026-02-21 10:36:47+00:00
> Large language models (LLMs) have astounded the world with their capabilities, yet they remain plagued by unpredictability and hallucinations – confidently outputting incorrect information. In high-stakes domains like finance, medicine or autonomous systems, such unreliability is unacceptable.

This misses a point that software engineers initmately know especially ones using ai tools:

* Proofs are one QA tool

* Unit tests, integration tests and browser automation are other tools.

* Your code can have bugs because it fails a test above BUT...

* You may have got the requirements wrong!

Working with claude code you can have productive loops getting it to assist you in writing tests, finding bugs you hadn't spotted and generally hardening your code.

It takes taste and dev experience definitely helps (as of Jan 26)

So I think hallucinations and proofs as the fix is a bit barking up the wrong tree

The solution to hallucinations is careful shaping of the agent environment around the project to ensure quality.

Proofs may be part of the qa toolkit for AI coded projects but probably rarely.
by gusfoo | 2026-02-21 10:38:22+00:00
I really tried my best to open a Facebook account, so I could open a developer account. All correct and real info. Instaban immediately after account creation, immediate "go away forever" email after clicking the "appeal" button.

The fact that you have to open a personal account first, in order to start a developer account seems mad to me. I have no interest at all in having a personal Facebook account.
by slyfox125 | 2026-02-21 10:38:47+00:00
It looks great using Plasma. If the comparison and "problem" is the lack of a "ribbon" menu, etc., then you are missing the whole point of Office alternatives: they are free, open source, but most importantly, they are usable. That is, they do not eschew usability and function for the sake of change, pure aesthetics, or a company's latest foray into some new gimmick.

Ultimately, the "classic" approach taken is because many users feel that the classic style is more usable and makes them more productive irrespective of their learned habits of the past 20-30 years.
by anonnon | 2026-02-21 10:40:00+00:00
> The strangest thing about all of this to me is how contemporary SF seems to have absorbed basically none of the city's previous culture. You can detect the commercial, artistic, cultural histories of NYC in the various industries there, from media to finance. Ditto for LA, or London, or Paris.

So you're saying migration changes a society's culture, sometimes to the point of ruination?

There was a high-profile example of this phenomenon recently in NYC, where a 35yo nobody managed to win the mayoral election with fake smiles and empty promises, because 40% of the city is now foreign-born. Had only native-born Americans (not even just those born in NYC) voted, he would have lost.

And it was telling how differently his opponents presented themselves, emphasizing, in their dying outer borough accents, their "toughness"--an attribute once thought essential for the mayor of America's largest city to possess, especially for anyone with a memory of the city before (and during) 9/11. Now? Apparently superfluous. And the victor's ever-present smile, rather than off-putting to the city's voters, who in the past might have perceived it at best as phony, and at worst, as more befitting one the city's countless mentally ill transients, instead unexpectedly found it endearing.
by austin-cheney | 2026-02-21 10:40:24+00:00
As a hiring manager know what you want and be careful what you communicate to determine your desired audience.

Secondly, skill verification is a form of leaky abstraction and may not be what hiring managers want. It’s most often not about finding the most skilled candidate but rather the most compatible candidate. This can commonly mean finding the least sucky person from a pool of sucky people.

Hiring managers can game that by setting requirements criteria for a job. If you want extremely skilled people then get down to the metal and find candidates that like to work without tools or abstractions. If you super versatile candidates find people with experience in a bazillion different tools. If you just want a body to fill a seat that is quick to hire/fire select for the latest trendy framework.

The best way to determine the right candidate is to ignore the nonsense on their resume and just talk to people. Dig in and see what they really want and then challenge it with questions only they can answer. Most people are bodies just wanting to be hired without bringing anything special to the table so that’s what most employers target for. The real challenge here is finding people that are highly skilled in a market where exceptional skills outside the bell curve are not commonly rewarded, because these people will not self identify as awesome when looking for work in compatibility driven system. The people that most typically do identify as awesome tend to not be as awesome as they believe.
by daem | 2026-02-21 10:41:59+00:00
I see this in the headers. But there was no option in the MacOS Mail client to unsubscribe. Only the Unsubscribe link in the body of the email.

Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=member.24hourfitness.com; s=twentyfourhour; t=1762443065; bh=KDZeTqKlOBd6YUTrR6K4RMz9MA2BueBl6/LnKG57yqY=; h=From:Date:Subject:To:MIME-Version:Message-ID:List-Unsubscribe: Content-Type; b=Bq6qnq65i1EN6Df9A5TpcCn3AnNzE8yjkNdDYkapehQV727Jrma15ZU4e88I8Ckdk iH5CZrtJPlNqPscm3JWbuP4IavLVKDNf3Prlm4q75tTXE0IyaTPexyOoGTu+4PoAeG wEa8WaN6zfLl5AkPO0U+zjFHicSx3ooyNomFTI2AtSVoVHVPcubtZV8wRPUy4EV9mV pRBroHp1Uj/LCFRyZRScbs5plfxEpmd3wO9vnMsXW6jqOi19kqfOkhTUKpaRVxxJA+ /cMIq+Wh4TSpt6+22gcm4hLsCVNW0mAImjTZZ/yPFwoGpLaoPOia8aYde1mlROOoZi yx81OFO+90kRQ==