MurphyA/hacker-news huggingface dataset:
by re-thc | 2026-02-04 21:17:18+00:00
> I mean if we want recent examples just look at tailwindui since it's technically a SaaS.

How is it in any way B2B? At most B2C + freelancers / individuals / really small SME.

It didn't have any clues a med/large B2B would look for e.g. SSO, SOC2 and other security measures. It doesn't target reusability that I as a B would want. The provided blocks never work together. There aren't reusable components.

Tailwind UI or now Tailwind Plus is more like vibe coding pre-AI.
by 827a | 2026-02-04 21:17:21+00:00
This isn't happening. The past six months has been rough on public B2B SaaS valuations, but the impact is a lot wider than just B2B SaaS (its all non-S&P10 software), and valuations are just vibes in the end. Most of these companies are, financially, doing pretty well; seeing key metric growth, including revenue and profit. This makes sense: AI does not fundamentally change the bargain SaaS brought to the table, that companies would rather pay someone to solve their problems than solve them themselves. However, the stock market doesn't care about this. The stock market doesn't care about anything; it behaves irrationally and non-sensically, and trying to derive any sense of how stable, strong, or successful a company is from stock market valuation is like using lines of code to claim that a software project is really good.
by JimA | 2026-02-04 21:17:37+00:00
I generally avoid extensions that can read all sites (even if technically necessary), so use the suggestion found here [1] instead.

A few bookmarklets:

javascript:(function(){if (location.host.endsWith('x.com')) location.host='xcancel.com';})()

javascript:(function(){if (location.host.endsWith('youtube.com')) location.host='inv.nadeko.net';})()

javascript:(function(){if (location.hostname.endsWith('instagram.com')) {location.replace('https://imginn.com' + location.pathname);}})()

[1] https://www.reddit.com/r/uBlockOrigin/comments/1cc0uon/addin...
by mindweather | 2026-02-04 21:17:45+00:00
Finally wrote down a counterintuitive approach that I’ve been using since 2008 to find every job in my own career—without wasting countless hours applying online, sending resumes, or talking to random recruiters… Most of those jobs weren’t even posted. I’ve taught the approach to 100s of folks in tech, who’ve had similar results. Hopefully people find it useful.
by wtetzner | 2026-02-04 21:17:55+00:00
> If I can get a solution that is “close enough” in a fraction of the time and effort, it is irrational not to take the AI route.

I think this is context dependent. Over time, within a single code base or ecosystem, incompatibilities between "close enough" solutions can add up and create a lot of problems and complexity, kinda like floating point inaccuracies. Especially if you're not going back and revisiting the structure/abstractions you've already got when you're adding/changing something.

There's another angle too, which is that time taken to improve your abilities isn't necessarily irrational, especially because that improvement is usually applicable in many different ways. It can be an investment.
by no_wizard | 2026-02-04 21:18:16+00:00
I think the value is lost on the end user, but it’s more readily apparent to everyone above them.

I’ve talked to many non engineering managers that love Jira, love the reports, the way they can see work flows, do intake etc.

Engineers and even alot of engineering managers loathe it, largely, but I think we’re the collective afterthought

Also, FWIW, a lot of pain people have with Jira is self inflicted by the people who setup the instance and how it works, vs vanilla Jira
by Eddy_Viscosity2 | 2026-02-04 21:18:25+00:00
> you are witnessing the practice of thinking about the consequences of words before commiting to speech.

It feels different than that though. Its not unusual for someone to take beat before responding, but in that case there are facial and body cues that they heard you and are just getting their thoughts and words in order. But in the case of users, there is an expressionless pause even before that. More like blank pause, then facial cues of thinking, then an answer. That's why I used the 'via satellite' analogy because its like it takes longer for them to even register that they have been spoken to.
by marcosdumay | 2026-02-04 21:18:57+00:00
The Japanese central bank arrived in zero effective interest rates in the 90s, and has been practicing negative effective rates (I.E. smaller than inflation) for a while.

That had the effect that their banks took huge amounts of government loans and used it to buy foreign assets. As returns are higher in countries with higher interest rates, and lots of assets are practically safe, like government bonds, that is close to free money for them, and a very cheap loan to the receiving country.

But last year their central bank made the interest rate positive. And investors are acting on the expected way, selling the foreign assets and paying off their government. The article is claiming that this is the cause of the recent turbulence in the investment markets.
by JoshTriplett | 2026-02-04 21:19:17+00:00
> It is socially impolite to yawn in public.

No, it isn't. It can be socially impolite to yawn unexcused, when someone is talking to you, as it has come to be interpreted as boredom rather than tiredness or similar. But it isn't inherently impolite to, for instance, yawn when walking down the street, or in a setting where someone isn't talking to you.
by quizzical8432 | 2026-02-04 21:19:22+00:00
I’m with you on the shared photo albums. I’d been using lockdown mode for quite a while before I discovered this limitation, though. For me, this is one I’d like to be able to selectively enable (like the per-website/app settings). In my case, it was a one-off need, so I disabled lockdown mode, shared photos, then enabled it again.

The other feature I miss is screen time requests. This one is kinda weird - I’m sure there’s a reason they’re blocked, but it’s a message from Apple (or, directly from a trusted family member? I’m not 100% sure how they work). I still _recieve_ the notification, but it’s not actionable.

While I share with your frustration, though, I do understand why Apple might want to have it as “all-or-nothing”. If they allow users to enable even one “dangerous” setting, that ultimately compromises the entire security model. An attacker doesn’t care which way they can compromise your device. If there’s _one_ way in, that’s all they need.

Ultimately, for me the biggest PiTA with lockdown mode is not knowing if it’s to blame for a problem I’m having. I couldn’t tell you how many times I’ve disabled and re-enabled it just to test something that should work, or if it’s the reason a feature/setting is not showing up. To be fair, most of the time it’s not the issue, but sometimes I just need to rule it out.
by deltastone | 2026-02-04 21:19:46+00:00
It's something you know vs. something you have. That's how the legal system sees it. You might not tell someone the pin to your safe, but if police find the key to it, or hire a locksmith to drill out your safe, it's theirs with a warrant.

It's interesting in the case of social media companies. Technically the data held is the companies data (Google, Meta, etc.) however courts have ruled that a person still has an expectation of privacy and therefore police need a warrant.
by chadwebscraper | 2026-02-04 21:19:54+00:00
I appreciate the response! I also agree - happy to add some clarity to this stuff.

Bot protection - this is handled in a few ways, the basic form bypasses most bot protections and that’s what you can use on the site today. For tougher sites, it solves the bot protections (think datadome, Akamai, incapsula).

The consistency part is ongoing, but it’s possible to check the diffs and content extractions and notice if something has changed and “reindex” the site.

100k URLs is a lot! It could support that, but the initial indexing would be heavy. It’s fairly resource efficient (no browsers). For scale, it’s doing about 40k/scrapes a day right now.

Appreciate the comments, happy to dive deeper into the implantation and I agree with everything you’ve said. Still iterating and trying to improve it.
by operatingthetan | 2026-02-04 21:20:11+00:00
>that companies would rather pay someone to solve their problems than solve them themselves.

Are they not able to just engage AI to solve those problems now? E.g. this morning I saw an app that did something interesting to me for $20 a month. 20 minutes in Gemini and I had a functional app that replicated the behavior. SaaS are more complex but give me a small team and a couple months and we could replicate most any of them.
by SuperEgoHealth | 2026-02-04 21:20:17+00:00
SuperEgo Health | REMOTE | Multiple locations | INTERN

Mobile App Development & Design Engineer Intern (Cross-Platform iOS & Android)

Stipend
₹45,000 per month or equivalent (full-time internship/contract)

Duration: 3–6 months

SuperEgo Health is a healthcare product studio building consumer-facing products across healthcare, AI, and wellness.

We operate with small, senior teams and a strong bias toward shipping. We are hiring a Mobile App Development & Design Engineer Intern in South Asia and South-East Asia to design, build, and ship cross-platform iOS and Android applications used by real users. You should be comfortable with topics and discussions involving consumer healthcare related needs.

Required Skills & Qualifications:

- Strong experience with Flutter (React Native acceptable, Flutter preferred)

- Ability to design clean, usable mobile UI independently

- Solid understanding of mobile architecture and state management

- Experience consuming web and REST APIs

- Comfortable working with ambiguity and minimal specifications

- Strong ownership, independence, and execution speed

- Proficiency with Git and remote collaboration

- Clear written and spoken English

- Good design judgment and an eye for polished UI/UX

- (Optional) Access to BYOD for iOS development
(Mac + iPhone/iPad for local builds and testing)

Please email the following to talent@superego.health:

- Résumé or LinkedIn profile

- (Optional) GitHub and/or app portfolio

- A short note describing a feature you built independently

This is a hands-on, high-ownership role. You will be expected to own features end-to-end—from idea and UI decisions to implementation, polish, and release. You will ship production features.

Expected 5–6 hours of availability with Pacific Time.

Core collaboration, planning, and reviews happen during PST hours
by trouble3968 | 2026-02-04 21:20:21+00:00
Funnily enough at least in my personal anecdotic case it works about like that. I do just remember when my meetings will be (or look up where the meeting was decided on), do try to remember what I had planned (sometimes I forget, but almost always for the better), and written notes are rare enough that pen and paper are sufficient. And also don't have a driver license. I don't think my case is exactly rare, even among softdev croud.
by simojo | 2026-02-04 21:20:31+00:00
I suppose that's why the harpejji [0] has recently gained popularity? I too have wished for an isomorphic keyboard. All of the non-stacked ones become either too wide or the keys become too skinny. Example: Dodeka Keyboard [1]. I know that the Lumatone [2] exists too, but it is too progressive for my taste :)

As a side note, the traditional keyboard size is not representative of the average pianist's hand size. David Steinbuhler [3] has been making modified traditional keyboard layouts
by varying the width of the keys slightly, and people rave about it. I've had the chance to visit his shop in Titusville, Pennsylvania, where he designs them. It's a totally enhanced playing experience, even for someone like me who can play a 10th without difficulty.

[0] https://en.wikipedia.org/wiki/Harpejji
[1] https://dodekamusic.com/
[2] https://www.lumatone.io/
[3] http://dsstandardfoundation.org/the-standards/
by ajross | 2026-02-04 21:20:48+00:00
> it turns out that there are a lot of situations where PIO can avoid the need for an application-specific peripheral

And I can only repeat: I think that's an aspirational delusion. I'm not aware of anyone shipping a PIO solution to anyone in volume. It's "useful weird" to Hackerspace nerds like us, and that leads to some epistemological skew.

Hardware needs to be boring and reliably supported (by people you can sue!) or else no one will bet a 10k unit PCB run on it. This is anything but.
by tastyfreeze | 2026-02-04 21:21:19+00:00
Partially gold backed reduces counter-party risk. Fully gold backed, and exchangeable, eliminates counter-party risk.

China appears to be attempting to reproduce what the USD was before it was free floating.

USD is currently backed by debt and nominally military might. If the US defaults then all of the US bonds held by foreign banks become worthless. That is an enormous risk which is why countries have been divesting from US bonds. If USD was still gold, as it was before 1913, if you hold your money it cannot be made worthless by a third party. After 1913 USD became gold backed bills with partial reserve. It is why USD became the global reserve currency. But, reserve requirements were reduced and more paper was produced. In 1971 Nixon removed the convertibility of paper bills to gold metal effectively stealing the gold of any nation that asked the US to hold it.

One of my favorite bits of currency trivia is that a $20 double gold eagle coin used in circulation prior to 1933 had a gold content of 0.9675 troy ounces. Twenty dollars in your hand was literally nearly an ounce of gold.
by hansmayer | 2026-02-04 21:21:25+00:00
"For example, to create a data visualization I won’t seek any SaaS. I’ll just code one myself using many of the popular vibe coding tools (my team actually did that and it’s vastly more flexible than what we’d get off-the-shelf)."

That maybe doable in your 10-people startup, Namanyay. Try doing it in a larger organisation with layers upon layers of firewalls, databases, authentication systems and not the least importantly - management. Not to mention the vastly different audience, both in size and interest. Your own experience is not the experience of everyone else.
by pphysch | 2026-02-04 21:21:26+00:00
> Everyone's going to talk about how cool their custom vibe-coded CRM is until they get stuck in a failed migration.

Failed/partial/expensive migrations is the name of the game with SaaS as well. Lock-in is the bottom line.

Migrations become much less scary when you truly own your data and can express it in any format you like. SaaS will keep sticking around, especially those that act like white-hat ransomware.
by ssl-3 | 2026-02-04 21:21:55+00:00
2004! You were way ahead of most of us on that game.

Custom CNC stuff is tremendously rewarding and fun to work with. I haven't built a 4x8 table (yet), but I've made some smaller stuff. I credit the introduction of these machines into my life with bringing me out of the deepest and longest-lasting period of mental unwellness I've ever experienced, and it'll be a real shame if this kind of hobby becomes hobbled by legislation.

But anyway, to address your question: Unless the fine state of New York decides to close their borders, nothing stops a person from building their own dangerously-unregulated 3D printing machine.

Just as nothing stops a person from taking a drive over the Hudson and buying one already-assembled from the Microcenter in Patterson, NJ. New Jersey isn't beholden to the laws of New York, and they won't care at all where the buyer is from.

It's the same thing folks in Ohio do to buy cheap weed: We drive up to Monroe, Michigan, where there's a veritable cornucopia of places dedicated to selling that devil's lettuce. It's against Ohio law to bring it back into Ohio (as of 2026), but there's a constant churn anyway. In the parking lots, Ohio license plates often outnumber the Michigan plates. Michigan doesn't care about this; they're not responsible for the problems that Ohio creates for itself.
by jongjong | 2026-02-04 21:22:24+00:00
Just because it's possible to build equivalent software by vibe coding doesn't necessarily mean that companies will stop using SaaS. There are multiple reasons why...

First of all, many big companies pay a fortune to use inferior SaaS solutions instead superior Open Source solutions; possibly because one of their CTO may have received kickbacks or promises of a lucrative job at the SaaS provider as a consequence of this deal. There are a lot of politics going on behind the scenes when it comes to procurement.

Execs at big corporations are often looking for plausible ways to spend investors' money in a way that they can capture some of it for themselves. If they choose open source or they choose cheap vibe coded solutions; there is not much money changing hands. No opportunities for insiders to covertly monetize.

And then there are a lot of security implications to using a complex vibe coded app. The AI won't be able to identify the vulnerability in any decent sized codebase unless you know what you want it to look for.
by ge96 | 2026-02-04 21:22:27+00:00
Side note, been watching gold prospecting channels lately, there will be these dig sites/claims people go to, they'll do their thing, dig a hole, run it through some angled ramp water contraption... they get like nothing, it's the experience I suppose. But I was wondering what the owner gets from all these people showing up.

They'll work for hours and end up with $4 of gold
by 4corners4sides | 2026-02-04 21:22:47+00:00
Despite having read articles discussing when to delegate to AI discussing agent completion time, agent success probability and human verification time the thought of genuinely systematising and solving the problem of verification and QA never occurred to me. My mind is still in the mode where “building” and “shipping” are noble goals that are to be sought after even though that era is dead due to how low the difficulty bar has dropped (the bar is six feet deep). We should build and we should ship faster, but only considering those aspects is irresponsible and childish. With these new automated reasoning systems we ought to validate in as much as possible before presenting anything to the user.

Possibly the most salient point in the article is the following: “for the love of god, put [...] whatever tool du jour you're using to blow up your codebase, and make sure every claim in your README, every claim in your docs (you have docs, right?), every claim on your website is 100% tested and validated. Run actual rigorous benchmarks. Set up E2E tests driven by behavioral specs. Take your users seriously enough to deliver a good experience out of the box rather than trying to use hype to drive uptake then hoping they'll provide you with free QA”.

Personally this really resonated with the absolute fatigue I feel inside when I see a new “Show HN” to a GitHub repository in the year of our lord 2026. I’ve been burned by “slop” repos so much that my I already feel the Claude emoji drivel coming and sure enough a lot of the time that’s all a repo is, the abandoned and uncared for orphan child born of a passionate one night stand with Claude Code. Not a single screenshot or demo video in sight, just plausible promises dumped into a file for end users to figure out.
Show HN: TITO – Automated threat modeling from code (open source)
by xxmrlnxx | 2026-02-04 21:22:52+00:00
I built TITO because threat modeling is broken. It either requires drawing diagrams by hand, hiring consultants, or buying tools that start at $50K/year. Most teams skip it entirely.

TITO reads your code and builds the threat model for you:

go install github.com/Leathal1/TITO/v2/cmd/tito@latest
tito scan --repo .

What you get in ~60 seconds:

- STRIDE-LM classification — threats categorized by Spoofing, Tampering, Info Disclosure, DoS, Elevation of Privilege, Lateral Movement
- MITRE ATT&CK mapping — every finding linked to real-world attack techniques
- Attack path analysis — how individual findings chain into realistic breach scenarios (think BloodHound for app-layer threats)
- MAESTRO analysis — maps threats across agentic AI security layers (if your code uses LLMs/agents)
- Compliance mapping — PCI DSS v4.0, SOC 2, ISO 27001, NIST 800-53, HIPAA
- Interactive 3D visualization — explorable data flow diagrams with attack path overlays
- PR threat diffing — catch security regressions on every pull request

Under the hood it runs Semgrep for static analysis, detects your architecture (monolith, microservices, serverless, AI/ML), and layers threat intelligence on top.

Single binary. No config files. No accounts. No data leaves your machine.

The Cloud Security Alliance is listing TITO as a community implementation of their MAESTRO framework for agentic AI security.

CI/CD integration:

- uses: Leathal1/TITO@v2
with:
maestro: true
fail-on: critical

Technical details: written in Go, ~15K LOC, MIT licensed. GitHub Action on the Marketplace. Docker images available.

I'd love feedback — especially from folks doing AppSec or building AI agents. What frameworks or compliance mappings would be most useful to add?

GitHub: https://github.com/Leathal1/TITO
by coldpie | 2026-02-04 21:23:03+00:00
> This comment is repeating a political slogan with no consideration of the content of the article.

Bezos was able to purchase one of the nation's most important news outlets because he is a billionaire. If his wealth was capped at $100M, he would have had to pool resources with many other ultra-wealthy individuals to effect the same purchase. These people would have competing interests, and would also themselves be open to being bought out because their ownership stake in the company would be small. This would be good for the country, because one person being able to turn an important news outlet into his personal propaganda machine is bad, as the article describes.
by johnea | 2026-02-04 21:23:09+00:00
After smoking weed for over 50 years, I would definitely say I am not addicted.

When I travel internationally, often for periods of over a month, I don't use any cannabis at all.

During these times I experience no withdrawal symptoms or craving.

I abstained for over a year during a number of periods during those 50 years, due to specific job requirements and other situations where using weed would be viewed detrimentally.

If anything, I would say cannabis is one of the least "addictive" substances that create a euphoric experience.

Please remember the old adage: gateways work for both getting you out of, as well as into, other situations. I would say that cannabis would be a great substance to use daily for helping people abstain from more harmful substances.

In the US we have the ass-hat social acceptance of: Alcohol, tobacco and firearms, like the little baby jesus intended.

All three of which are VASTLY more dangerous and deadly than cannabis.

A more direct link to the article, which doesn't require "Are you a bot" authentication, or javascript:

https://news.cuanschutz.edu/news-stories/study-finds-cannabi...
by spacedcowboy | 2026-02-04 21:23:25+00:00
To me, integrated means it integrates a bunch of tasks that used to be separate. I used to have a text-editor, a Makefile to use with 'make', a command line debugger, a static-analyser, and a profile target in that Makefile that I could use to figure out where my code was slow, using another command line tool.

All of that is in Xcode (and a hell of a lot more besides). That makes it integrated, at least IMHO.

You commented above, and I replied, about some of the tasks you use an integrated terminal for, and I'm not trying to say you shouldn't or that that's not useful to you - you obviously know your own workflows and what works best for you :) I just don't see it as "the most basic feature you could integrate into an IDE" (which was the original claim).

I'd probably put 'text editor' up as the most basic, closely followed by compiler integration and then debugger. Static analysis would probably come next, then unit-testing support, doc-comments, and tools like refactoring, good multi-file search/replace etc.

A terminal app is way, way down the list. For me. I realise everyone is different and YMMV :)