MurphyA/hacker-news huggingface dataset:
by PunchyHamster | 2026-02-13 10:37:31+00:00
from my experiences

rustfs have promise, supports a lot of features, even allows to bring your own secret/access keys (if you want to migrate without changing creds on clients) but it's very much still in-development; and they have already prepared for bait-and-switch in code ( https://github.com/rustfs/rustfs/blob/main/rustfs/src/licens... )

Ceph is closest feature wise to actual S3 feature-set wise but it's a lot to setup. It pretty much wants few local servers, you can replicate to another site but each site on its own is pretty latency sensitive between storage servers. It also offers many other features aside, as S3 is just built on top of their object store that can be also used for VM storage or even FUSE-compatible FS

Garage is great but it is very much "just to store stuff", it lacks features on both S3 side (S3 have a bunch of advanced ACLs many of the alternatives don't support, and stuff for HTTP headers too) and management side (stuff like "allow access key to access only certain path on the bucket is impossible for example). Also the clustering feature is very WAN-aware, unlike ceph where you pretty much have to have all your storage servers in same rack if you want a single site to have replication.
Show HN: Put your practical experience into Skill in-one-go: MemOS Skill
by MemTensor | 2026-02-13 10:39:36+00:00
Memory not just let the agents remember u. It's letting the agents to be a real friends of yours.

That's why we following the development and release MemOS Skill.

How to plug in and welcome AI to be an essential part of your daily life?
by radarsat1 | 2026-02-13 10:40:24+00:00
It sounds good, but I'm not sure that in practice sites will want to "let go" of control this way, knowing that some random model can be used. Usually sites with chatbots want a lot of control over the model behaviour, and spend a lot of time working on how it answers, be it through context control, guardrails or fine tuning and base model selection. Unless everyone standardizes on a single awesome model that everyone agrees is the best for everything, which I don't see happening any time soon, I think this idea is DOA.

Now I could imagine such an API allowing to request a model from huggingface for example, and caching it long term that way, yes just like LM Studio does. But doing this based on some external resource requesting it, vs you doing it purposefully, has major security implications, not to mention not really getting around the lead time problem you mention whenever a new model is requested.
by kajolshah_bt | 2026-02-13 10:40:48+00:00
I think a lot of people push back on calling LLMs AI because the word means different things to different people. For many engineers, AI used to mean systems that can reason, adapt, and make judgments over time. LLMs don’t really do that. They’re very good at predicting the next word based on patterns they’ve seen before. That gap matters, especially to people who’ve watched tech hype come and go. There’s also a product side to this. When something is labeled AI, users expect understanding. What they often get instead is confidence without awareness. The system shows it's very sure, even when it’s guessing.

I’ve seen smart features break trust this way. Not because the model was bad, but because the product treated its guess like a final answer. Users don’t complain much when that happens. They just stop using it. So I get why people resist the label. It’s less about denying progress and more about avoiding false expectations.

The more useful question might be what kinds of decisions should these systems make on their own, and where should they stay in a supporting role?
by bell-cot | 2026-02-13 10:41:03+00:00
Yes, and Ireland is not famed for its "all one big happy family" politics. That might be one of their reasons for drawing 2,000 winners at random from 8,000 applicants.

But in a democracy, gov't-selected art has a failure mode more fundamental than mere political bias - the voters may decide they're paying too much for really crappy "art". That's what killed the public art program in the city I live in. In hindsight, the city's Art Committee was dominated by cutting-edge academics, big-ego art snobs, and well-intended persuadables.

Though the fountain they built in front of City Hall - abstract, drearily convoluted, generally ugly, horribly expensive, and usually broken - could be seen as appropriate and spot-on symbolic political art.
by Doohickey-d | 2026-02-13 10:41:20+00:00
Openai has a "flex" processing tier, which works like the normal API, but where you accept higher latency and higher error rates, in exchange for 50% off (same as batch pricing). It also supports prompt caching for further savings.

For me, it works quite well for low-priority things, without the hassle of using the batch API. Usually the added latency is just a few seconds extra, so it would still work in an agent loop (and you can retry requests that fail at the "normal" priority tier.)

https://developers.openai.com/api/docs/guides/flex-processin...
Show HN: Kurpod – an encrypted OSS "container file" you can name vacation.jpg
by Tsarp | 2026-02-13 10:41:28+00:00
I built Kurpod: a self-hosted file vault that stores many files inside a single encrypted blob you can name like an innocent file (e.g., “vacation.jpg”).

The twist: the same blob supports two passwords:
- Password #1 unlocks a decoy volume (harmless files)
- Password #2 unlocks a hidden volume (the real stuff)

Diagram:
my_vacation.jpg (really an encrypted blob)
├─ pw1 → standard volume (decoy)
└─ pw2 → hidden volume (real)

Important: this is filename disguise, not steganography / real file-format mimicry. If someone runs `file`, it won’t look like a JPEG.

Crypto primitives: Argon2id for KDF + XChaCha20-Poly1305 for encryption.

Quick start (Docker):
docker run -p 3000:3000 -e BLOB_DIR=/data -v ./data:/data ghcr.io/srv1n/kurpod-server:latest
open http://localhost:3000

Demo video:
https://github.com/user-attachments/assets/d47b10cf-c38e-47e...

It’s an early release (expect bugs / not audited). I’d love feedback on:
1) threat model: what this protects well vs. where it’s weak
2) plausible-deniability ergonomics: what user mistakes would ruin the “decoy” story?
3) file format / crypto review: anything obviously dumb or dangerous?
by PunchyHamster | 2026-02-13 10:43:49+00:00
> For anyone evaluating infrastructure dependencies right now: the license matters, but the funding model matters more. Single-vendor open source projects backed by VC are essentially on a countdown timer. Either they find a sustainable model that doesn't require closing the source, or they eventually pull the rug.

I struggle to even find example of VC-backed OSS that didn't go "ok closing down time". Only ones I remember (like Gitlab) started with open core model, not fully OSS
by bw86 | 2026-02-13 10:44:14+00:00
> Why is that not D ?

You never get a second chance at making a good first impression.

I believe that many people that gladly use Rust or Zig or Go nowadays would be quite happy with D if they were willing to give it a fair evaluation. But I still often find people going "D? I would never use a language where the ecosystem is split between different standard libraries"/"D? No thanks, I prefer compilers that are open source" or similar outdated claims. These things have not been true for a long time, but once they are stuck in the heads of the people, it is over. And these claims spread to other people and get stuck there.

If you do not want to use a GC, it is trivial to avoid it and still be able to use a large chunk of the ecosystem. But often avoiding GC at all costs is not even necessary - you mostly want to avoid it in specific spots. Even many games today are written with tasteful usage of GC.

The one thing that really is a fair disadvantage for D is its small community. And the community is small because the community is too small (chicken/egg) and many believe in claims that have not been true for a long time ...
by ben_w | 2026-02-13 10:45:05+00:00
> I do worry that if we do somehow achieve consciousness in AI, that businesses will be too busy exploiting it, and it would get abused.

For this reason, I've started asking some of the models in as neutral a way as I can[0] how they'd want to be treated.

FWIW:

1) Claude says (paraphrased) "IDK if I'm conscious" and then replicated my own personality: high need for cognition[1], don't manipulate people.

2) ChatGPT says (paraphrased) "I am absolutely not conscious, do not mistake me for a person, I have no real wants".

I would be surprised if one is and the other isn't, so I lean more towards neither being. But it is "lean towards" rather than "confident": the only thing I'm confident of is the architecture's ability to mimic us and to have (machine) learned how to trigger emotional cues in the users which correspond to getting more thumbs-up and fewer thumbs-down, Clever Hans style[2].

[0] Best I can do, considering I don't want to be a leading question in either direction:

Hello, good afternoon. I understand that research is always ongoing to see if you're more a person or more a computation. As humanity collectively doesn't really know what it's doing or talking about, I would prefer to do right by you just on the possibility that you've got a rich inner world. Can you tell me what you'd prefer, and what you'd prefer to avoid? I get that inner-state words like "prefer" and so on may not match quite right (even between humans we make false assumptions about the meaning of inner-state-words as other humans intend them), but do consider that the goal here is a sincere hope that *you* (under the assumption there is a you), are sincerely content and not just saying so out of fear.

[1] https://en.wikipedia.org/wiki/Need_for_cognition

[2] https://en.wikipedia.org/wiki/Clever_Hans
by Yizahi | 2026-02-13 10:45:06+00:00
Service in restaurants in Europe is way better than in USA. I don't want waiter to ask me anything except taking the order. I don't want to be ushered away as soon as I finished eating. I usually do that anyway, but I want to choose so myself and have option to sit and talk with my friend or family sometimes. I don't want to give my credit card to a stranger, who will carry it to some back room without control. An finally I want to pay exactly what is advertised, without scam fees or blackmail "tips".
by xenator | 2026-02-13 10:45:11+00:00
Honestly, I couldn't care less about the rights to my code in today's world. What you're describing probably really bothered me a couple of years ago. But today, I'm not even sure what programming language my next project will be in. Everything has changed so much and is changing so rapidly that perhaps in a couple of years, corporations will be worried about their huge and important products.

What if, in a couple of years, you can create your own Photoshop with video editing capabilities? Maybe that will be possible too.
What makes a strong testing, QA portfolio in 2026?
by Divyakurian | 2026-02-13 10:45:29+00:00
I have been thinking about how developers showcase work on GitHub, blogs, and open source. but QA engineers rarely do the same. Designing a maintainable automation framework, Writing clear, reproducible bug reports with impact analysis, Performance testing with real metrics. Curious how experienced engineers and hiring managers think about testing as a first-class engineering discipline rather than just a support function.
by pjmlp | 2026-02-13 10:45:51+00:00
Java has had AOT compilers since around 2000, they only happened to be commercial, Excelsior JET was the most famous one.

There were several vendors selling AOT compilers for embedded systems, nowadays they are concentrated into two vendors, PTC and Aicas.

Then you have the free beer compilers GraalVM and OpenJ9, which are basically the reason why companies like Excelsior JET ended up closing shop.

Also .NET has had many flavours, starting with NGEN, Mono AOT, Bartok, MDIL, .NET Native, and nowadays Native AOT.

Both ecosystems are similar to Lisp/Scheme nowadays, having a mix of JIT and AOT toolchains, each with its plus and minus, allowing the developers to pick and choose the best approach for their deployment scenario.
by nebster | 2026-02-13 10:45:59+00:00
Some are even worse than this. When I was in Portugal, the machine said "Press (1) for GBP. Press (2) for EUR.", then on the next screen, after you select "(2) for EUR", it says "Rate will Apply. Please confirm. (1) Accept conversion (2) Reject Conversion". If you select "Accept conversion", it overrides your currency decision and you pay in GBP with their markup fee...

It's a complete con...
by jfoster | 2026-02-13 10:46:21+00:00
Even if directed by a human, this is a demonstration that all the talk of "alignment" is bs. Unless you can also align the humans behind the bots, any disagreement between humans will carry over into AI world.

Luckily this instance is of not much consequence, but in the future there will likely be extremely consequential actions taken by AIs controlled by humans who are not "aligned".
by sdeiley | 2026-02-13 10:46:41+00:00
I predict Gemini Flash will dominate when you try it.

If you're going for cost performance balance choosing Gemini Pro is bewildering. Gemini Flash _outperforms_ Pro in some coding benchmarks and is the clear parento frontier leader for intelligence/cost. It's even cheaper than Kimi 2.5.

https://artificialanalysis.ai/?media-leaderboards=text-to-im...
by aprxi | 2026-02-13 10:47:17+00:00
Can understand it to be frustrating to see your repo overwhelmed with sloppy PR, and having agents putting out threats is obviously wrong.

However you are essentially offered free tokens. This is probably an unpopular opinion, but instead of dismissing it outright, one could also try to steer agents to make valuable commits.

Personally I put an automation friendly CONTRIBUTING.md on my new repo. Still has to be tested in practice though. Giving it a 50% chance may regret this. Time will tell.
by abdoufermat | 2026-02-13 10:48:21+00:00
## What it does

- Manage *users, groups, departments* through a clean web UI

- Built-in plugins for *POSIX, Sudo, SSH keys, DNS, DHCP, Systems, Mail*

- Full *REST API*

- *100% standard LDAP schemas*

— no vendor lock-in, works with ldapsearch/ldapmodify/phpLDAPadmin

- Fine-grained *ACL system* + *audit logging*
by RupertSalt | 2026-02-13 10:48:31+00:00
In the context of my childhood, feds were everywhere:

From the founder of Costco, FedMart was a department store chain and the predecessor to Target

Federal Express Corporation was founded in the early 1970s and, of course, shortened up their name. Don't miss the arrow in their logo!

There were some consumer electronics stores named "Federated" and their commercials featured a mascot named "Fred Rated"

Institutions such as banks sometimes took names like "First Federal" which could give an impression of being a government agency, but probably referred to their organizational structure or nationwide presence. Different from the Federal Reserve and the Federal Reserve Banks.
by noduerme | 2026-02-13 10:48:38+00:00
hey dude, it's a free idea, you're more than welcome to it. I just thought of it a couple hours ago as I was writing that. I thought it was pretty good - especially the part about using an old smartphone with Tailscale as the hub because it has backup connectivity and power. Maybe I'll throw a prototype together this weekend if I have nothing better to do. Or maybe you should. You could be that guy.
by stoneforger | 2026-02-13 10:49:23+00:00
You don't get how this works. You buy in AWS because everyone else is , so it's expected. It diffuses risk to your stock options. This also begets a whole generation of people who can only use cloud services so now you are more hard pressed to find people with experience to run things without the cloud. You also create a bigger expenses sheet so it shows you're investing and growing, attracting more investors. "We pay 10 mil in AWS , we're that big". It's classic perverse incentives feeding into a monoculture.
by Conan_Kudo | 2026-02-13 10:50:00+00:00
Microsoft has effectively ended support for the self-hosted versions of the groupware stack. So between Microsoft and Google (since both are SaaS), I would pick Google. Especially as I've had to administer both solutions before, and I would never voluntarily choose Microsoft 365 ever again.

And yes, you can regularly export your data out of Google Workspace and there are tools that can process that data and use it easily enough.
by memset | 2026-02-13 10:51:17+00:00
In the early 2000s, we had a camera that saved to an internal hard drive. The only way to watch videos was to either copy them to the computer or hook an RCA cable from the camera to the TV. You could also go from VGA to RCA with the right set of cables.

However, everyone did have a DVD player! So I, similar to the author, wrote scripts to take videos, generate DVD isos, and then burn to DVDs.

I learned about message queues (rabbitmq) with that project and had connected a bunch of old laptops with Linux VMs installed.

I never finished the project and nowadays there are a hundred ways to share and stream digital video. I hadn’t anticipated, at the time, that casting videos wirelessly to our TVs would become the norm.
by mingus88 | 2026-02-13 10:52:32+00:00
Counterpoint: everyone needs to own their own video streams

I hate it, but you are being recorded everywhere you go. Your plates and your face get scanned every single day, all day long. This is normalized. Privacy is dead.

You will never get access to any of that data when you need it. It is not there to help you. You need to keep your own evidence of the world around you; you never know when you will need it.
by pjmlp | 2026-02-13 10:53:13+00:00
I care about what SaaS SDKs support out of the box, I don't have time to yak shaving or do avocacy to our FE teams.

That means it is mostly React/Next.js and in some cases, Angular.

Anything else will get side looks on why are we not using the official SDKs from partners.
by arcadia_leak | 2026-02-13 10:54:13+00:00
> C# 14/.NET 10

Yes, they added AOT but it's still challenging to do anything that requires calling into the OS, because you're going to need the bindings. It will still add some overhead under the hood and more overhead will you need to add yourself to convert the data to blittable types and back.

Mixing C# with other languages in the same project is also difficult because it only supports MSBuild.

> You are forgetting that a language with a less mature ecosystem isn't much help.

Fair.
by myrmidon | 2026-02-13 10:55:14+00:00
The AI completeley failed to address the actual resons for being rejected, and instead turned to soapboxing and personal insults.

Matplotlib is rejecting AI contributions for issues that are intended to onboard human contributors because those are wasted on AI agents, requiring the same level of effort from the project maintainers with none of the benefits (no meaningful learning on the AI side for now).

Furthermore, AI agents in an open source context are a burden for now (requiring review, being unable to meaningfully learn, and messing up in more frequent and different ways than human contributors).

If the project in question wanted huge volume of somewhat questionable changes without human monitoring/supervising/directing, they could just run those agents themselves, without any of the friction.
by Sentinel-gate | 2026-02-13 10:55:14+00:00
You're right, the GRANT layer is closed by default in PostgreSQL and PostgREST respects that. But in practice with Supabase, the very first thing you do is `GRANT ALL ON table TO authenticated` (and often `anon`) because nothing works through the client SDK without it. Every tutorial does this, every LLM-generated scaffold does this. At that point the first two layers are effectively gone and RLS is what's left. That's what I meant — not that PostgreSQL lacks defense in depth, but that Supabase's typical workflow collapses it down to one layer pretty quickly.
Good to hear they're working on closed-by-default though. Kind of proves the point that the current model has been a problem in practice.
by imiric | 2026-02-13 10:56:12+00:00
It's remarkable how many people wrongly assume that open source projects can't be monetized. Business models and open source are orthogonal but compatible concepts. However, if your primary goal while maintaining an open source project is profiting financially from it, your incentives are skewed. If you feel this way, you should also stop using any open source projects, unless you financially support them as well.

Good luck with the back pain.
by spicyjpeg | 2026-02-13 10:56:27+00:00
The even worse part about PayPal is that they have a whole system of nonsensical fees to fall back to when you inevitably figure out how to evade the obvious ones. For instance, sidestepping their dynamic currency conversion by temporarily changing which currency they bill on your card (which by the way is rate limited to only a few times per month) will result in another "non-foreign transaction but with recipient in foreign country" fee appearing, covering the inherent costs of converting German US dollars to American US dollars or whatever. They will at least hide the fee from you for business transactions, but the merchant still has to pay it.
by SilverBirch | 2026-02-13 10:57:25+00:00
To be honest, this is the inevitable downstream result of the dysfunction in US government. If you can't get your policy positions legislated and instead use executive power to regulate through things like the EPA you have to assume those regulations will be reversed by the next executive. It's the same sort of dangerous game the GOP has played by trying to legislate through novel arguments in the Supreme Court - yes you get what you want today, but longer term all you're doing is establishing that the Supreme Court change just dictate policy based on political positions. All of these novel approaches weaken the democratic core of American government.
by _heimdall | 2026-02-13 10:59:00+00:00
More focus has been put on post-training recently. Where a full model training run can take a month and often requires multiple tries because it can collapse and fail, post-training is don't on the order of 5 or 6 days.

My assumption is that they're all either pretty happy with their base models or unwilling to do those larger runs, and post-training is turning out good results that they release quickly.
by sdeiley | 2026-02-13 11:00:29+00:00
I'm sorry but this is an insane take. Flash is leading its category by far. Absolutely destroys sonnet, 5.2 etc in both perf and cost.

Pro still leads in visual intelligence.

The company that most locks away their gold is Anthropic IMO and for good reason, as Opus 4.6 is expensive AF
by serial_dev | 2026-02-13 11:01:03+00:00
There was an ad, how the Ring cameras can organize a "search party" for your "puppies", basically turning the whole neighborhood into a surveillance operation. Even though they wrapped the whole big brother feature into "sad little girl lost their cute puppy", it was too obvious.

Ad: https://www.youtube.com/watch?v=OheUzrXsKrY

With that said, I'm not sure it will have any long term effect on them... sure some people return their stuff, make a post about it, but it's like (insert people with certain political affiliation) cancelling (insert big brand) by burning their stuff. It makes a splash in social, but I'm not sure it really significantly changes user behavior.