MurphyA/hacker-news huggingface dataset:
by BrenBarn | 2026-02-24 20:33:52+00:00
> I live in an area that has a lot of walkable and bikeable things nearby. There are a lot of people who drive anyway.

The less warm and fuzzy part of this urban-design approach is that it can't just be about making things easier to walk to, it also has to be about making them harder to drive to. For instance, by making parking limited and/or expensive. People tend not to like that idea, although I think there's a good likelihood they'd actually be happy with it if not for the meta-awareness of having "lost" parking.
by andyferris | 2026-02-24 20:33:55+00:00
Like many things in the US, this should be settled by congress not judges.

Things that everyone relies on for life are generally regulated by law. Telecom platforms for instance. I’d say the mandatory software platform I need for my bank, drivers license, daily communication, etc should be in this bucket.

The EU declaring both Apple and Google gateway platforms is a much better approach. Congress is abdicating its responsibility to craft the legal frameworks for equal access in the modern age.
by jasonjayr | 2026-02-24 20:34:00+00:00
Why do banks go through all the know-your-customer (KYC) process if not to identify the beneficial owner of every account? If they receive a transfer via fraud, then they either get it clawed back, have to pay it back, and/or get identified to law enforcement. If the last bank in the chain doesn't want to play by the rules, then other banks shouldn't transfer into them, or that bank itself should be held liable.

This is more or less how people expect things to work today ....
by ignoramous | 2026-02-24 20:34:05+00:00
> the guilty party knew they were perpetrating a criminal action ... the IDF has little or no accountability for criminal behavior.

May be the brazenness is why they make the best Tech CXOs?

"The Israeli tank commander who has fought in one of the Syrian wars is the best engineering executive in the world. The tank commanders are operationally the best, and are extremely detail oriented. This is based on twenty years of experience — working with them and observing them."

Eric Schmidt (Start-up Nation / Saul Singer et al / pg. 41)
by umairnadeem123 | 2026-02-24 20:34:13+00:00
the worktree-per-agent approach is the right call. we run a similar setup with claude code subagents and the biggest lesson was that filesystem isolation is non-negotiable for parallel agents - even with git branches, agents stepping on each others lockfiles and node_modules was a constant source of weird failures.

the 500ms task startup from pre-warmed worktrees is a nice touch. we found that cold worktree creation was one of those things that felt fast enough in demos but became a real friction point when you are spinning up 5-10 agents per session.
by cxr | 2026-02-24 20:34:20+00:00
> it's not at all clear which is which from the names. Ideally you design that in from the [start]

It was, and there is: setting elementNode.textContent is safe for untrusted inputs, and setting elementNode.innerHTML is unsafe for untrusted inputs. The former will escape everything, and the latter won't escape anything.

You are right that these "sanitizers" are fundamentally confused:

> "HTML sanitization" is never going to be solved because it's not solvable.¶ There's no getting around knowing whether or any arbitrary string is legitimate markup from a trusted source or some untrusted input that needs to be treated like text. This is a hard requirement.

<https://news.ycombinator.com/item?id=46222923>

The Web platform folks who are responsible for getting fundamental APIs standardized and implemented natively are in a position to know better, and they should know better. This API should not have made it past proposal stage and should not have been added to browsers.
by simonask | 2026-02-24 20:34:47+00:00
They have had problems with the suspension arms, but word on the street is that it’s just the brake discs.

Denmark is significantly more moist than California, and EVs regenerative braking doesn’t wear the braking discs, so they rust, thus failing inspection.

The solution is trivial (periodically disable regenerative braking), but many people didn’t know.
by umairnadeem123 | 2026-02-24 20:35:00+00:00
the group commit pattern is the real insight here. S3 CAS conditional writes changed the game for building coordination primitives on object storage - before that you needed an external lock service which defeated the whole point of keeping things simple.

we use a similar pattern for orchestrating distributed batch jobs. the key thing people miss is that the 200ms S3 PUT latency stops mattering once you batch. our job scheduler does ~50ms effective latency per enqueue because it amortizes across dozens of pending writes per commit cycle. the write amplification concern is valid but at <1GB total queue size the cost is literally cents per month.
by srpablo | 2026-02-24 20:35:13+00:00
I think it's a bit like `rails generate`, where it massively speeds up getting a CRUD webapp 0 to 1, but once you get to GitHub or Shopify size, you need a lot more than that to add a new data model.

AIs are pushing many things forward, but due to training sets and context windows, I think meaningfully adding to actually valuable apps, at least as we currently write them (the kind with many DBs/caches/message queues, services) will take a fair bit longer.
by zephen | 2026-02-24 20:35:14+00:00
I think you're missing the point. Or, on re-reading, the parent is missing the point.

"Honor culture" or "Culture of honor" is the term for people who are thin-skinned, quick to offense, and worried more about appearances than substance.

https://en.wikipedia.org/wiki/Culture_of_honor_(Southern_Uni...

https://en.wikipedia.org/wiki/Honor_killing

It's all about a shame-based society. When someone is made to feel ashamed, they might lash out. It's practically the opposite of guilt, which is directed inwardly.

At the margins, a shamed person might commit mass murder, while a guilty person might commit suicide.

Before you get to the margin, both guilty people and shamed people might alter their behavior in beneficial ways, but they do it for subtly different reasons.
by Timon3 | 2026-02-24 20:35:14+00:00
Also from that URL (with links):

> There is on-the-ground evidence of resulting impacts: Rising malnutrition mortality in northern Nigeria, Somalia, and in the Rohingya refugee camps on the Myanmar border and rising food insecurity in northeast Kenya, in part linked to the global collapse of therapeutic food supply chains. Spiking malaria deaths in northern Cameroon, again linked to breakdown in the global supply of antimalarials, and a risk of reversal in Lesotho’s fight against HIV, part of a broader health crisis across Africa.

"Spiking malaria deaths in northern Cameroon" links to an article[0] which states:

> BOGO, Cameroon, Oct 2 (Reuters) - Nine-month-old baby Mohamat burned with fever for three days before his family took him to the closest health centre in northern Cameroon, but it was too late. He died of malaria that day.
Mohamat's death was part of a spike this year in malaria fatalities that local health officials attribute to foreign aid cuts by the United States.
Before the cuts, Mohamat might have been diagnosed earlier by one of more than 2,000 U.S.-funded community health workers who would travel over rough dirt roads to reach the region's remotest villages.
And at the health centre, he might have been treated with injectable artesunate, a life-saving drug for severe malaria paid for by U.S. funds that is now in short supply. But the centre had none to give out.

So the URL very directly identifies a dead individual, a country and a continent, while also mentioning other cases that we hopefully all can agree will also directly lead to deaths.

Do you take issue with this example? Or why are you stating that they're not "identifying a single dead individual, or country or even continent where these mass deaths are supposed to have occurred"?

[0]: https://www.reuters.com/business/healthcare-pharmaceuticals/...
by wps | 2026-02-24 20:35:19+00:00
Hey I’ve seen your project before! You bring up a super good point that I was thinking of when I brought up the idea that the extension should be renamed to .kp . Really the only reason to keep the KeePass name would be branding, people know and trust it. Honestly my dream password manager is essentially something that uses the CodeBook (by SQLCipher authors) storage format, but with the nice trustworthy, FOSS KeePass ecosystem chrome on top of it (keepassxc<-browser>, keepassium, etc).
by ako | 2026-02-24 20:35:21+00:00
Education is not the problem. People know sugar is bad, people know cigarettes are bad, people know alcohol is bad, still millions use these substances every day.

What works best is to find some form of exercise that you really enjoy. I will get up at 5 in the morning, skip diner, skip appointments when i get a change to exercise, just because i enjoy it so much.

In addition, what also helps is to ensure normal activities require excercise. I will walk to the shop every day for groceries, walk the dog every day, cycle into town, best if you can cycle to work.
by hinkley | 2026-02-24 20:35:57+00:00
Little did you know that your ideas were incorporated into Navy training. The Navy is wet work and you need practice working in such conditions. They unfortunately left out your concessions stands and the water slide. Sorry.

(I know that submariners literally have water obstacle courses where they have to learn to, for instance, do some repairs while a compartment is flooding, but I’ve no idea what the Navy does as a whole).
by mccoyb | 2026-02-24 20:36:00+00:00
Skills feel analogous to behavioral programs. If you give an agent access to a programmable substrate (e.g. bash + CLI tools), you write these Markdown programs which are triggered and read when the agent thinks certain behaviors will be beneficial.

It's a great idea: really neat take on programmability, and can be reloaded while the agent is running without tweaking the harness, etc -- lots of benefits.

`pi` has a great skills implementation too.

I think skills might really shine if you take a minimal approach to the system prompt (like `pi`) -- a lot of the times, if I want to orchestrate the agent in some complex behavior, I want to start fresh, and having it walk through a bunch of skills ... possibly the smaller the system prompt, the more likely the agent is to follow the skills without issue.
by NewsaHackO | 2026-02-24 20:36:12+00:00
Maybe not, but I think that overextending any idea like that in the opposite direction of whatever point you are trying to make at least devolves into a "slippery slope" argument. For instance, is your point that all security on phones that impede freedom of the user (for instance, HTTPS, forced password on initial startup, not allowing apps to access certain parts of the phone without user permissions, verifying boot image signatures) should be removed as well?
by umairnadeem123 | 2026-02-24 20:36:16+00:00
the real advantage of WebRTC here is NAT traversal without any config. SSH requires either port forwarding, a relay service like Tailscale, or a publicly reachable host. WebRTC with ICE/STUN/TURN handles all of that automatically and degrades gracefully.

that said, the security model is fundamentally different. SSH has decades of hardened key exchange and host verification. WebRTC DTLS-SRTP is solid for the data channel but the trust anchor shifts to whatever signaling server coordinates the connection. if the signaling server is compromised you get MITMed. with SSH you verify host keys locally.

for the actual use case of phone-to-mac on the same wifi or carrier NAT, Tailscale is probably still the right answer. but this is a neat exploration of the design space.
by bitwize | 2026-02-24 20:36:22+00:00
> This includes ones that would never be allowed in an official store because they're DRM-free alternatives to big streaming services but still offer all the same content.

Do you know anyone who works in a professional creative field that doesn't involve writing code? If so, ask them how they'd feel about their work bring out there on the internet free to all takers. What the implications would be for their ability to feed their children and pay their mortgage doing the things they love.

This is what I mean by "programmer-brained." Of all creative workers, only programmers seem okay with abolishing IP laws, I guess because they figure they'll be okay living out of an office at MIT, or even worse out of an office at some YC startup that turns the user into the product. But artists, musicians, writers, filmmakers, etc. all put food on the table because of those IP laws programmers hate so much. Taking that protection for the fruit of your labor away would be at least as disruptive as AI has been.
by Aurornis | 2026-02-24 20:36:28+00:00
People don't like that idea because it's highly exclusionary.

It only sounds good to younger people who don't have any disabilities, kids, grandparents who want to come along, or any number of other valid reasons to walk.

It's also highly indicative of the weather where you're from. Forcing people to bike and walk everywhere sounds a lot better if you're in a moderate climate where bad weather means you need to pack a light jacket and wait for the light rain to stop. Move somewhere with harsh winters and the moralizing about people driving places stops making sense quickly.
by umairnadeem123 | 2026-02-24 20:37:15+00:00
the debate about schematic vs breadboard view misses the real audience here. for people who already think in schematics, yes this adds nothing. but for kids and software engineers picking up electronics as a hobby, the physical representation bridges the gap between "i bought an arduino kit" and "i understand what a pull-up resistor does."

the simulation aspect is the real killer feature though. falstad does this well in 2D but being able to see current flow on a breadboard layout that matches the physical thing sitting on your desk removes an entire layer of translation. thats one less thing to debug when your circuit doesnt work.
by kodebach | 2026-02-24 20:37:40+00:00
It is a non-sensical ruling. But IIRC the reason was basically that while Apple and Google did basically the same shit, only Google kept a written record of their monopolistic behaviour, so only Google was found guilty.

However, there is a relevant court case here. The one about Samsung's "Auto Blocker" (https://arstechnica.com/gadgets/2025/07/samsung-and-epic-gam...). Epic Games sued because Samsung made it too hard to install apps from "untrusted" sources. This may be a reason why Google is now trying to make the process more difficult on the developer side instead.
by nogridbag | 2026-02-24 20:37:50+00:00
This is a timely post. Just last night my 8 y/o asked if she could create a presentation on my laptop like they do at school. I have no idea what software they use at the elementary school.

I've let her play around with Google Docs before. But what I really wanted was something like Creative Writer that is more kid friendly. I used Gemini (sorry) to suggest some software and it suggested "Book Creator" which is intended for schools/teachers. I signed up as a fake teacher and added my kids as students and they did create some really creative books, importing images, and adding their own drawings. But it's still missing that kid-friendly vibe like Creative Writer.
by k_bx | 2026-02-24 20:37:50+00:00
Bitwarden is a shit product lacking basic niceties: search is terrible (substring match is beyond first page of results), UI is sometimes non-async (typing freezes search), no way to sort by newest/date added, no way to make two note (textarea) fields, no way to expand it, consumes memory and CPU etc

However, it’s open-source, cross platform and sorta works.
by umairnadeem123 | 2026-02-24 20:38:05+00:00
the agentic coding lecture is a smart inclusion. students are going to use these tools regardless - better to teach them where the failure modes are than pretend the tools dont exist.

the thing i would add is a practical exercise where students have to debug agent-generated code that has a subtle correctness bug. in my experience the most dangerous failure mode is not obviously wrong code but plausible code that passes basic tests and fails on edge cases. teaching students to be skeptical reviewers of AI output is probably the highest-ROI skill you can give them right now.
by marcosdumay | 2026-02-24 20:38:15+00:00
People expected something like that to happen, so only the few most naive people waited for the news to sell. As a result, people that would sell because of that sold already.

On the other hand, after those few people sell, the stock won't fall anymore, so the people that were waiting for it to stop falling before they buy make their move.

That's very common, but not reliable for you to make a profit on it. And anyway, those short-term changes are mostly meaningless.
by asim | 2026-02-24 20:38:21+00:00
I think we're about to see an explosion in "mini apps". It's taken 10+ years for us to catch up to WeChat and China but this regulation and other issues are going to block a lot of innovation and we're better off surfacing tiny PWA or SPA like apps that get loaded in native apps or we just do away with that entirely. The time has come.
by joshuamorton | 2026-02-24 20:38:24+00:00
> Now they'll need to pay off a local mailman to give them all of Google's letters with an address in an area they control so they can register a town's worth of addresses, big whoop. It'll cost them a bit more than the registration fee, but I doubt it'll be enough to solve the problem.

Yeah, this is a huge amount more work than, like, nothing.
by Imustaskforhelp | 2026-02-24 20:38:37+00:00
Taylor swift does seem to be using AI or something. I mean she's nice but not as nice as South park creators imo.

I have heard so much about Steven Spielberg but I must admit that I don't know much about the man but to me it does feel like you must be correct that he's a good guy, though I do see some controversies of steven spielberg on internet but South park is infamous with controversies as well.

There are 3028 billionaries from Forbes list and many many more almost-billionaires yet we have at most so few good billionaires that you can count them on your fingers.
by umairnadeem123 | 2026-02-24 20:38:47+00:00
the real win here is defense in depth for the markdown rendering case. if you have a markdown library that produces HTML and you want to inject it into the DOM, setHTML with a custom Sanitizer config that only allows your expected elements (h1-h6, p, a, code, pre, ul, ol, li, em, strong) gives you a second layer of protection against any parser bugs in the markdown library itself.

previously you had to choose between DOMPurify (extra dependency, potential mismatch with browser parser) or rolling your own allowlist logic. having this built into the browser with the same parser that actually renders the content eliminates an entire class of mutation XSS bugs.
by FarmerPotato | 2026-02-24 20:39:00+00:00
The design "decisions" are easy to explain. The 9985 failed. They had a development prototype with a 9900 emulating the expected CPU. The 9918 VDP was the cheapest way to add 4K later 16K of DRAM. And that was what they shipped after the 9985 was killed.

------------------------------

From 1977 they expected a 9985 to succceed the cheap 40-pin 9981, both having an 8-bit external bus (1). It would have 256 bytes of RAM onboard. I speculate it would have the 9900 microcode optimizations seen in the military SBP9989.

Anecdotally, the 9985 failed seven tape-outs. It was killed. The Bedford UK team was tasked with starting over: eventually this produced the 9995.

But the Home Computer had been prototyped using a 9900 board. So that was forced into the 99/4 (not A) with some external 256 byte SRAM.

Memory was expensive. The 9918 VDP, made by a team in 1975 with junior engineer Karl Guttag, was the cheapest way to interface 4Ks DRAM which TI made and sold to itself. By the time it reached market, 16k in 8x 4116s was optimal.

Various efforts to cost-reduce and upgrade the 99/4A ran into the '82 price-war with Commodore.

Every design iteration that added more RAM (2 or 8 or 16K directly accessible from the CPU) was "paid for" by reducing the cost elsewhere (PALs for instance.) BOM was around $105. [3]

But in the price war, engineers were told to deploy the cost-savings without any new features: this was the 99/4A 2.2 or QI for quality improved. [3] The 99/4A was already a loss leader by Q4 1982 [5].

In 1981, Karl Guttag's new 9995 passed first silicon [2]. It used the new optimized 99000 CPU core which also famously passed on first tape-out. The 9995 was available in quantity in 1982 [3] when new consoles were started around it: 99/2, 99/8.

The 99/2 was supposed to be cheap enough to compete with Sinclair. [6]

The 99/8 was a technical beast for the high-end, having 64K of directly accessible RAM. Its fancy memory mapper drove 24 bit external addresses. It supported 512K off board, which the P-Box had been designed for. It had Pascal built-in. Yet there was no Advanced VDP for it: stuck with the same 9918A.

In early 1983, TI assembled a team of two dozen engineers to write software for it: Pascal applications, new LOGO, a database, new word processor, TI FORTH, and complete accounting package, and a rumored superior easy-to-use interface. Pascal was supposed to deliver many benefits. It would be a small business machine. (4)

Of course, in November 1983, all efforts ceased as Home Computer was cancelled--just as the consoles were to be unveiled at Winter CES.

-----------

(1) An 8-bit bus was always going to be optimal--even the IBM PC 8088 saw that. 16-bit peripheral chips were never going to be made: the package size would prohibit that.

(2) Electronics Magazine and EE Times articles

(3) Internal memos of Don Bynum, program manager

(4) TI Records, DeGolyer Library, SMU : Armadillo and Pegasus

(5) "Death of a Computer", Texas Monthly, end of 1983?

(6) BYTE Magazine June 1982-ish

Based on research for my book: _Legacy: the TI Home Computer_.

From memory...
by foxglacier | 2026-02-24 20:39:13+00:00
You should also know that China doesn't have as much rule of law as America and indeed average people have a lot to worry about around the police, and generally are very careful not to do things that will get them beaten up. But it happens nontheless - violent assaults on street sellers by police, for instance. In China, people are actually scared of the police because the policemen have so much arbitrary power. They're not strictly and fairly enforcing the law at all.
by snowhale | 2026-02-24 20:39:22+00:00
Fairphone does it properly -- unlockable bootloader, repairability-first design, 10-year software support commitment, and they actually ship security updates on time. the catch is it's Europe-only and the hardware specs are mid-range. if you're in Europe and don't need flagship performance, it's genuinely the right answer to 'can I own my phone'. also LineageOS official device support (lineageos.org/devices) is broader than most people realize -- lots of Motorola and some Xiaomi devices are on there, and the unlock process for those is usually just a fastboot command.
by sheiyei | 2026-02-24 20:39:40+00:00
Protecting from scams isn't protection from the victim themselves. That should be obvious from the fact that very intelligent and technologically literate people too can fall for phishing attacks. Tell me for example, how many people in your life know how a bank would ACTUALLY contact you about a suspected hijacking and what the process should look like? And how about any of the dozens of other cover stories used? Not to mention the situations where the scammers can use literally the same method of first contact as the real thing (eg. spoofed).
...And the fact that for example email clients do their best to help them by obscuring the email address and only showing the display name, because that's obviously a good idea.