MurphyA/hacker-news huggingface dataset:
by jeroenhd | 2026-02-05 07:58:52+00:00
From the article:

> Around this time, you realize that the web interface for this thing has some stuff that phones home, and part of what it does is to send stack traces back to sentry.io. Yep, your browser is calling back to them, and it's telling them the hostname you use for your internal storage box. Then for some reason, they're making a TLS connection back to it, but they don't ever request anything. Curious, right?

Unless you actively block all potential trackers (good luck with that one lol), you're not going to prevent leaks if the web UI contains code that actively submits details like hostnames over an encrypted channel.

I suppose it's a good thing you only wasted 30 seconds on this.
by jstrong | 2026-02-05 07:59:02+00:00
From the article:

> The real bottleneck is the single-threaded main loop in the postmaster.

A single-threaded event loop can do a lot of stuff. Certainly handle 4000 tasks of some sort in under 10s. Just offhand it seems like it would be eminently possible to handle incoming connections on the scale they describe in a single-threaded event loop.

Clearly the existing postgres postmaster thread is a bottleneck as it is implemented today. But I'd be interested to go deeper into what it's doing that causes it to be unable to keep up with a fairly low workload vs. what is possible to do on a single thread/core.
by SCdF | 2026-02-05 07:59:09+00:00
You need to take every comment about AI and mentally put a little bracketed note beside each one noting technical competence.

AI is basically an software development eternal september: it is by definition allowing a bunch of people who are not competent enough to build software without AI to build it. This is, in many ways, a good thing!

The bad thing is that there are a lot of comments and hype that superficially sound like they are coming from your experienced peers being turned to the light, but are actually from people who are not historically your peers, who are now coming into your spaces with enthusiasm for how they got here.

Like on the topic of this article[0], it would be deranged for Apple (or any company with a registered entity that could be sued) to ship an OpenClaw equivalent. It is, and forever will be[1] a massive footgun that you would not want to be legally responsible for people using safely. Apple especially: a company who proudly cares about your privacy and data safety? Anyone with the kind of technical knowledge you'd expect around HN would know that them moving first on this would be bonkers.

But here we are :-)

[0] OP's article is written by someone who wrote code for a few years nearly 20 years ago.

[1] while LLMs are the underlying technology https://simonwillison.net/tags/lethal-trifecta/
by userbinator | 2026-02-05 08:01:16+00:00
I am reminded of the old AMD CPUs with "unlockable" extra cores, which would when unlocked change the model name to something unusual.

"GenuineIotel" is definitely odd, but difficult to research more about; I suspect these CPUs might actually end up being collector's items sometime in the future.

because inserting no-op instructions after them prevents the issue.

The early 386s were extremely buggy and needed the same workaround: https://devblogs.microsoft.com/oldnewthing/20110112-00/?p=11...
by jeroenhd | 2026-02-05 08:01:23+00:00
From the article:

> You're able to see this because you set up a wildcard DNS entry for the whole ".nothing-special.whatever.example.com" space pointing at a machine you control just in case something leaks. And, well, something did* leak.

They don't need the IP address itself, it sounds like they're not even connecting to the same host.
by kavalg | 2026-02-05 08:02:25+00:00
In the beginning of my career, I've been once told by my senior management that I should never again:

1. Optimize things so that they work 10 000 times faster because it makes us look incompetent (must be done slowly to show gradual progress).

2. Brag about such optimization (to stakeholders) without first synchronizing this with them (so they can brag proportionally to their pay rate :) ).
by riazrizvi | 2026-02-05 08:02:50+00:00
I'm a brown immigrant, the process to get into the US legally was long. I trust US institutions to have good intent, but like all institutions they fail at times. The mandate is to remove 25 million illegal migrants. I reject the hostile posture that people are taking based on negatively biased information, which in my view, further reassures me they are acting in Americans' best interest. I care because my children are approaching the workforce and I want their opportunities to open up to them, unlike I've witnessed in the tech industry where unscrupulous businesses have happily replaced American workers with labor that is desperate. You can't convince me that the negative bias toward ICE isn't in large part, funded and astroturfed by elements in the business lobby that don't care about unemployed citizens and residents, and further drafted by those who have jobs so can afford to not care.
by watwut | 2026-02-05 08:02:52+00:00
There was never shortage of developers who "would sell their soul" for higher salary in conditions where job with slightly lower salary was easily available. I really do not think we have to pretend to our selves that if one of us does it, it is because he/she is poor and the kids would starve.

Also, layers are resining from positions in doj they find unethical. It is not like the jobs for them were easier to find.
by RGamma | 2026-02-05 08:03:19+00:00
Think Elon: A swarm of advanced AIs working from space, untouchable for most, steering execution of his power fantasy on earth. And if not he has military goons to sell it to.

The technical discussions here are distractions to the avoid dealing with the glaring dissonance that none of this will improve life on earth for the vast majority.
by Symbiote | 2026-02-05 08:03:27+00:00
I plugged in our own numbers (60 servers we own in a data centre we rent) and Microsoft thinks this costs us an order of magnitude more than it does.

Their "assumption" for hardware purchase prices seems way off compared to what we buy from Dell or HP.

It's interesting that the "IT labour" cost they estimate is $140k for DIY, and $120k for Azure.

Their saving is 5 times more than what we spend...
by Cyprus-consult | 2026-02-05 08:03:50+00:00
You are viewing sovereignty as a legal status, but in this specific vertical (Space/SatCom), it is a function of scale.

The harsh reality of 2026 is that the "Minimum Viable Economy" required to maintain orbital sovereignty—meaning a native LEO constellation and reusable launch capability, exceeds the fiscal bandwidth of any single member state.

The choice is no longer "National Sovereignty" vs "EU Federalism." The choice is "Pooled EU Sovereignty" vs "Client State status to the US."

We are effectively trading local political control for a shot at operational leverage. You might dislike the deal from a governance perspective, but from a systems perspective, fragmentation guarantees irrelevance.
by ZeroGravitas | 2026-02-05 08:05:32+00:00
We could also be going faster, but the Trump effect is mostly affecting further up the funnel, the full effects won't be felt for years.

If you have a half built wind farm then you have strong incentives to continue even if it involves unexpected court battles or bribes.

It's the projects that add those risks and costs at the planning stage that will go missing by not continuing.
by fauigerzigerk | 2026-02-05 08:05:41+00:00
I'm starting to wonder though whether companies even have the in-house competence to compare the options and price this risk correctly.

>Now a good company would concentrate risk on their differentiating factor or the specific part they have competitive advantage in.

Yes, but one differentiating factor is always price and you don't want to lose all your margins to some infrastructure provider.
by CER10TY | 2026-02-05 08:05:43+00:00
It swings both ways though. I've seen plenty of older engineers dismiss the "new guys" effort and claim that everything had to be custom written, because there's no way a common framework like Django could cover their use case. The same type of engineer has never once worked with a common framework though, so they don't know what's included nowadays.

Turns out it's a lot easier to build on top of a common framework than do everything from scratch.
by SilverElfin | 2026-02-05 08:06:33+00:00
They did the same thing with Azure right? I remember articles about Microsoft stock that would mention that Azure subscription numbers included Office 365. But the thing is, their weird game of inflating numbers worked. There wasn’t really any negative consequence of doing that. So why wouldn’t they do it again? It’s yet another unfortunate example of dishonesty being rewarded these days.
by globalnode | 2026-02-05 08:07:22+00:00
I love this. All these years I've been a privacy enthusiast lunatic, because ofc no-one has anything to hide. Now ad trackers are being potentially weaponised by the govt, and ofc no-one could have foreseen that. This is absolute gold. Will be patiently waiting for recall install's to start sending screenshots to ice of your private documents and comm's.
Why are Shopify app reviews so hard to evaluate?
by sosojustdo | 2026-02-05 08:07:58+00:00
I’ve been reading through a large number of Shopify App Store reviews
and noticed how difficult it is to extract real signals from star ratings.

Common issues seem to repeat across apps,
but they’re buried under noise and generic feedback.

For those familiar with marketplaces:
Is this a review system problem, or a decision-making problem?
by nemanja_codes | 2026-02-05 08:08:03+00:00
Location: Serbia, GMT +1
Remote: Yes
Willing to relocate: Yes
Technologies: React, Next.js, JavaScript/TypeScript, Node.js, Astro, TailwindCSS, Jest, Cypress, Prisma, PostgreSQL, MongoDB, Docker, C#/.NET, Python, FastAPI
Resume/CV: Available on request
GitHub: https://github.com/nemanjam
Website: https://nemanjamitic.com
LinkedIn: https://www.linkedin.com/in/nemanja-mitic
Email: nemanja.mitic.elfak [at] hotmail.com

I am a full stack developer with a Master's degree in Computer Science and 4.5 years of professional JavaScript experience. I specialize in React/Next.js frontends and Node.js backends, with solid DevOps fundamentals (Linux, containers, IaC, automation). Background in C#/.NET and growing interest in Python/FastAPI. Here are some of my projects:

1. Production-ready boilerplate - full stack Next.js, Prisma, unit, integration, e2e tests, CI/CD: https://github.com/nemanjam/nextjs-prisma-boilerplate

2. HN job ads aggregator - Next.js, SQLite (GitHub and demo links in the first post): https://news.ycombinator.com/item?id=42373936

3. Latest blog article - Integrating Next.js server actions with FastAPI: https://nemanjamitic.com/blog/2026-01-03-nextjs-server-actio...

I have experience working remotely for startups within globally distributed multicultural teams.

I am looking for a full-time remote position. Open to relocation for the right opportunity. I have detailed resume available upon request. You can check out my other projects at: https://github.com/nemanjam . You can tell me about your company and project via email: nemanja.mitic.elfak [at] hotmail.com or connect with me on LinkedIn: https://www.linkedin.com/in/nemanja-mitic .
by alex43578 | 2026-02-05 08:08:23+00:00
Upthread someone made the point that adult "physique" for lack of a better word matters more for some pursuits than others. Chess prodigies don't need to grow to 6ft tall, but if a basketball prodigy doesn't get tall enough, he's never making the NBA.

I think the same concept could generalize: for pursuit X, the impact of childhood skill is inversely related to the impact of adult form.
by FearNotDaniel | 2026-02-05 08:08:45+00:00
Flashback to the days when literally every MS product had “.NET” shoehorned into its name somewhere because they had to show they were hip to this newfangled information superhighway thing. The development platform that still has that name 20 years later was just one of a zillion confusingly named marketing initiatives back then.

Edit: Wikipedia sums up the "failed branding campaign" quite scathingly: https://en.wikipedia.org/wiki/Microsoft_.NET_strategy

I think that campaign followed on from everything being named "Enterprise" something. I still miss the days when SQL Server Management Studio was called "Enterprise Manager"...
by nomercy400 | 2026-02-05 08:08:46+00:00
From what I understand, sentry.io is like a tracing and logging service, used by many organizations.

This helps you (=NAS developer) to centralize logs and trace a request through all your application layers (client->server->db and back), so you can identify performance bottlenecks and measure usage patterns.

This is what you can find behind the 'anonymized diagnostics' and 'telemetry' settings you are asked to enable/consent.

For a WebUI it is implemented via javascript, which runs on the client's machine and hooks into the clicks, API calls and page content. It then sends statistics and logs back to, in this case, sentry.io. Your browser just sees javascript, so don't blame them. Privacy Badger might block it.

It is as nefarious as the developer of the application wants to use it. Normally you would use it to centralize logging, find performance issues, and get a basic idea on what features users actually use, so you can debug more easily. But you can also use it to track users.
And don't forget, sentry.io is a cloud solution. If you post it on machines outside your control, expect it to be public. Sentry has a self-hosted solution, btw.
by AtomicLynx | 2026-02-05 08:09:34+00:00
Look, software is not going away even though everybody thinks they're a developer now. Do you think companies are going to replace Microsoft Windows, of which there are a billion installs, or Salesforce, Crowdstrike, Quickbooks etc, with some Vibe coded AI slop an intern "coded"?

When enterprises/businesses in general upgrade any software in the company it takes years sometimes... There is also Vendor lock in, you can't just swap things with vibe-coded slop, and trust me your manager will never want to do that either because his butt will be on the line.
by tombert | 2026-02-05 08:09:36+00:00
I think there’s a significant difference between fourth grade and high school level math, especially the more advanced courses. I got the flu in 9th grade and missed a week of trigonometry. I was able to catch up and it wasn’t the end of the world, but it wasn’t trivial, there absolutely was a “catch up” period.

Agreed university is much harder though.
by satvikpendem | 2026-02-05 08:10:00+00:00
I just read about Railway doing something similar, sadly their prices are still high compared to other bare metal providers and even VPS such as Hetzner with Dokploy, very similar feature set yet for the same 5 dollars you get way more CPU, storage and RAM.

https://blog.railway.com/p/launch-week-02-welcome
by vladdoster | 2026-02-05 08:10:19+00:00
Location: Nashville, TN
Remote: true
Willing to relocate: boston || nashville
Technologies: Python, Django, IaC, Terraform, Golang, CI/CD, Azure/AWS, {ba,z}sh, Lua, Springboot,
Redis, Docker, Open Service Broker, {,non}relational & vector dbs, shared services, SOA
Email: mvdoster@gmail.com

resume: https://linkedin.vdoster.com && http://github.com/vladdoster

sr. cloud software engineer @ Mastercard (5 years)

Designed and built Platform-as-a-Service for microservice workloads running on Azure and AWS
to migrate on-prem workloads to the cloud. The platform operates globally, allowing teams to
deploy to several Azure-backed regions worldwide. Helped plan and create regional landing zones
in Azure for application teams wanting to perform globally. Designed platform components using
Terraform, Go, and Node; developed support tooling using Bash, Python, and Azure CLI. De-risk the
platform by addressing security vulnerabilities and ensuring the platform is PCI compliant.

api/devops software engineer @ Harvard Medical School (2 years)

Worked as part of the DevOps team to manage a 15k core CentOS HPC cluster. Designed and implemented
Python-based security scanning pipeline to securely deploy & run Apptainer images via SLURM.
Coordinated cross-team emergency patching eﬀorts. Collaborated with researchers and engineers across
3-letter institutions to deliver secure research infrastructure. Built CI/CD Pipelines with GitHub, Jenkins,
to automate code builds, testing, and deployments. Wrote Puppet modules to manage configuration of HPC fleet.
Wrote custom Puppet module & Python scripts to automatically remediate Tenable findings.

full-stack software engineer @ Global Prior Art (3 years)

Used Django, Celery, Selenium grid, and AWS API Gateway for IP rotation to scrape USPTO patent PDFs,
apply CV for data extraction, and generate reports with relevant claims, saving employees 4-5 hours daily.
Wrote E2E black-box/fuzzing unit tests. Automated on-premise deployment via Github Actions and Ansible.

maintainer @ Zinit (5 years)

Develop and maintain a zsh plugin manager on Github with 4k stars. Implemented unit tests,
containerization, bug fixes, and new features.
See: https://github.com/zdharma-continuum/zinit

contributor @ Open-source documentation (5 years)

Contributed hundreds of documentation corrections and enhancements to 400+ open source projects.
by msejas | 2026-02-05 08:10:55+00:00
Disagree on many points, stocks are used as collateral for debt financing, their prices can definitely trigger cascade effects and losses even if not actually sold.

Overreaching arguments that sellers are like selling because they plan to buy when it's lower, no proof and a limited view, in fact in my also overreached argument I would say the opposite, most people just want to put money on an ETF and hold it until retirement, without having to touch it, they sell because something is forcing their hand and they need the liquidity to pay for something else.

Gold is definitely a hedge for inflation and market instability which is why it's had such a big run up these past few months, and they are definitely used in most diversified portfolios, yale fund as an example, (I don't know where you got this notion from)
by alex43578 | 2026-02-05 08:11:09+00:00
Thinking back to my experiences in the program, there was a huge, readily apparent difference in the IQ of kids in the program versus "gen pop". In a regular class, the teacher would need to spend hours drilling the same concept, and still most kids would hardly grasp it. This wasn't a difference in maturity that could be explained by an 11 month age gap, but a literal IQ diff that persisted for the many years where I saw these peers.
by speedgoose | 2026-02-05 08:11:19+00:00
I would suggest to use both on-premise hardware and cloud computing. Which is probably what comma is doing.

For critical infrastructure, I would rather pay a competent cloud provider than being responsible for reliability issues. Maintaining one server room in the headquarters is something, but two servers rooms in different locations, with resilient power and network is a bit too much effort IMHO.

For running many slurm jobs on good servers, cloud computing is very expensive and you sometimes save money in a matter of months. And who cares if the server room is a total loss after a while, worst case you write some more YAML and Terraform and deploy a temporary replacement in the cloud.

Another thing between is colocation, where you put hardware you own in a managed data center. It’s a bit old fashioned, but it may make sense in some cases.

I can also mention that research HPCs may be worth considering. In research, we have some of the world fastest computers at a fraction of the cost of cloud computing. It’s great as long as you don’t mind not being root and having to use slurm.

I don’t know in USA, but in Norway you can run your private company slurm AI workloads on research HPCs, though you will pay quite a bit more than universities and research institutions. But you can also have research projects together with universities or research institutions, and everyone will be happy if your business benefits a lot from the collaboration.
by rl3 | 2026-02-05 08:12:46+00:00
Good defense is layered.

For vulnerabilities, complexity usually equals surface area. WireGuard was created with simplicity in mind.

>So, the alternatives to ssh you suggest are all reliant on passwords but ssh, in the case, is based on secure keys and no passwords.

WireGuard is key-based. I highly suggest reading its whitepaper:

https://www.wireguard.com/papers/wireguard.pdf
by defrost | 2026-02-05 08:13:21+00:00
Measles Has Now Begun To Infect Immigrant Detention Camps

It’s darkly funny, in a way, to recall a racist trope that gets trotted out about immigration all the time: immigrants bring disease into the country. That in itself isn’t funny, obviously. The funny part is that it seems like we’re proving the opposite to be true under the Trump administration. As the measles outbreak in America continues to rage, immigration detention camps are starting to feel the effects.

...

It’s also worth remembering that the spread of disease is a recurring feature in the concentration camp industry. Deaths from disease as well. And, unlike the trope mentioned above, these are infections immigrants are getting from America, not bringing to her soil.

~ https://www.techdirt.com/2026/02/04/measles-has-now-begun-to...
by tokyobreakfast | 2026-02-05 08:13:44+00:00
> While the step from 1080p 1440p to 4K is a visible difference

It really isn't.

What you are likely seeing is HDR which is on most (but not all!) 4K content. The HDR is a separate layer and unrelated to the resolution.

4K versions of films are usually newly restored with modern film scanning - as opposed to the aging masters created for the DVD era that were used to churn out 1st generation Blu-Rays.

The difference between a 4K UHD without HDR and a 1080p Blu-Ray that was recently remastered in 4K from the same source is basically imperceptible from any reasonable viewing distance.

The "visible difference" is mostly better source material, and HDR.

Of course people will convince themselves what they are seeing justifies the cost of the upgrade, just like the $200 audiophile outlet and $350 gold-plated videophile Ethernet cable makes the audio and video really "pop".
Why do I still use a notebook to track my lifts?
by jwizzed | 2026-02-05 08:14:05+00:00
I've been lifting for about 5 years and I'm also a dev. I've probably tried 15+ different workout tracking apps at this point, and I always end up back with either my notebook or just the Notes app on my phone.

The pattern I keep seeing: Download app → excited for a week → realize it takes 8 taps to log a single set → back to pen and paper.

Most apps seem designed around social features or trying to be "everything" (meal plans, progress photos, community challenges). Which is cool if that's your thing, but I just want to log "225 x 5" without navigating through three screens.

So I'm thinking about building something dead simple. Working name is "Valid." The core idea:

- Keyboard-first entry. Open app, type "225x5", hit enter. Done.
- No feed, no discover tab, no gamification badges
- At the end of each workout, it spits out a simple receipt-style summary (total volume, time, PRs if any) that you can screenshot and forget about

The receipt thing might be dumb, but I liked the idea of treating each workout as a discrete "transaction" rather than endless scrolling through history.

My question: Does this resonate with anyone else who lifts regularly? Or have you found an app that actually stays fast and minimal? Trying to figure out if this is a real gap or just my own pet peeve.

Happy to hear I'm wrong and there's already something good out there I've missed.