MurphyA/hacker-news huggingface dataset:
by withinboredom | 2026-02-01 13:25:54+00:00
And to add to this: virtually every programming language allows you to define multiple entry points. So you can have your workers in the exact same codebase as your api and even multiple api services. They can share code and data structures or whatever you need. So, if you do need this kind of complexity with multiple services, you don’t need separate repos and elaborate build systems and dependency hell.
by littlecranky67 | 2026-02-01 13:25:57+00:00
"Getting what you want" is not an attainable life goal for me. People who do that above all else, are willing to throw away with their values whenever it benefits them. So you end up not having or at least living by your values. Unless your value is you above everyone else - Exactly the people I avoid. And why would you want to surround yourself with people that only do what benefits THEM?
by hulitu | 2026-02-01 13:26:30+00:00
> It was something that I couldn't comprehend. They can see your location. They can turn on the camera. They can turn on the microphone, listen to you," al-Masarir tells the BBC. "They got your data, all pictures, everything. You feel you've been violated."

This just can't be true. iOS is a very secure operating system or am I missing something ?
by ndsipa_pomu | 2026-02-01 13:27:52+00:00
I think that's misguided. It's tricky to define a smart phone in a useful fashion as kids could get hold of mini devices that have wifi and bluetooth, but no other phone connections and surely that would be as bad as the smart phones.

I don't really see the issue with smart phones themselves - the problem is the attention whoring platforms that are warping people's minds and especially with young people, pushing unrealistic beauty/body standards.
by tentacleuno | 2026-02-01 13:28:23+00:00
There are definitely speciality shops that sell dark roasts like you might want. One in the UK, Rave, sells the most amazing Italian-style blend with robusta mixed in. It's not fruity at all, just pure dark roasty flavour (yes, I've got an espresso bar lol.)

That darker style gets frowned upon a lot ("bleuch! it's bitter!"), as a lot of people in the space have kinda embraced the more fruit-forward lighter roast stuff (if you roast darker, you tend to obscure them.) I like that too (some stuff is kickass), I just categorize it separately from darker stuff.

I believe some people have started calling it goop, presumably as an anthesis to soup, which is very coarsely ground espresso typically using lighter roasts.

Not sure where you're based (US?), but there will be stuff out there. Try r/coffee or your local forum maybe? Once you find a really good one, you'll probably just stick with it :-)
by kibwen | 2026-02-01 13:29:43+00:00
While I'm all for empowering your best contributors, I'll repeat what I say every time I hear someone mythologize about "10x engineers": if you want a 10x engineer, you need to pay a 10x salary.

When companies say they want a 10x engineer, what they really mean is that they want an engineer who will work for 10x less than they're worth.
by Nextgrid | 2026-02-01 13:30:00+00:00
Would love to see what those guys do against a device including actual KB/mouse/etc chips and simulating inputs to those chips' analog input lines.

From the host machine it's undetectable - it looks like a real KB/mouse because it is a real KB-mouse, no different from an actual real one with a robot arm moving it and pressing keys.

While those guys are weeding out the poor remote workers limited to off-the-shelf KVM devices that are just trying to enjoy their miserable bullshit job a bit more, actual attackers with more resources (including the DPRK they fear so much) are busy pwning them.
by tentacleuno | 2026-02-01 13:30:45+00:00
Ehh, who cares what the snobs think? Drink what you like! I've been experimenting with coffee for like 2 years, and have found myself really enjoying dark roasted stuff (as well as lighter stuff!)

The truth is, you can get a really fruity single-origin bean but as soon as it goes into a latte, typically you've lost 99% of the origin characteristics. It gets a bit wasteful and expensive. Cafes typically go for house roasts that lean darker, and I can see why: they just work better in milk!
by chrisjj | 2026-02-01 13:31:39+00:00
> LLM is Immune to Prompt Injection

> Despite all advances:

> * No large language model can reliably detect prompt injections

Interesting isn't it, that we'd never say "No database manager can reliably detect SQL injections". And that the fact it is true is no problem at all.

The difference is not because SQL is secure by design. It is because chatbot agents are insecure by design.

I can't see chatbots getting parameterised querying soon. :)
by moron4hire | 2026-02-01 13:32:08+00:00
A tomato is definitely a vegetable.

Botanically, there are no such things as vegetables. The classification of a thing as a "vegetable" is strictly a culinary distinction. Cucumbers, tomatoes, apples, oranges, they're all the fruit of the plant, but the first two are culinarily classified as vegetables and the last two as fruits.

Also, salad is a preparation method, specifically the chopping of ingredients and the application of a sauce to make a semi homogeneous dish. It is not strictly a dish of chopped vegetables, so putting apples "in a salad" doesn't mean the apple is being used as a vegetable. You can put meat in a salad and it doesn't make the meat a vegetable. Tuna salad can be made with no vegetables at all.
by debois | 2026-02-01 13:32:53+00:00
The study seems to be “solve this the obvious way, don’t think too hard about it”. Then the systems languages (C, Zig, C++) are pretty close, the GC languages are around an order of magnitude slower (C#, Java
doing pretty good at ca. 3x), and the scripting languages around two orders of magnitude slower.

But note the HO-variants: with better algorithms, you can shave off two orders of magnitude.

So if you’re open to thinking a bit harder about the problem, maybe your badly benchmarking language is just fine after all.
by banteg | 2026-02-01 13:32:58+00:00
Crimsonland (2003) is a top-down shooter that shipped as a stripped DirectX 8 binary with zero symbols. I decompiled it with Ghidra, validated behavior with WinDbg and Frida, and rewrote it from scratch in Python/Raylib — 46,800 lines matching the original behavior faithfully. The write-up covers static and runtime analysis, reverse engineering custom asset formats, and the full rewrite process. Code is on GitHub and it's playable now via uvx crimsonland@latest
by snuxoll | 2026-02-01 13:33:52+00:00
The problem of other minds is real, which is why I specifically separated philosophical debate from the technological one. Even if we met each other in person, for all I know, I could in fact be the only intelligent being in the universe and everyone else is effectively a bunch of NPCs.

At the end of the day, the underlying architecture of LLMs does not have any capacity for abstract reasoning, they have no goals or intentions of their own, and most importantly their ability to generate something truly new or novel that isn't directly derived from their training data is limited at best. They're glorified next-word predictors, nothing more than that. This is why I said anthropomorphizing them is something only fools would do.

Nobody is going to sit here and try to argue that an earthworm is sapient, at least not without being a deliberate troll. I'd argue, and many would agree, that LLMs lack even that level of sentience.
by usagisushi | 2026-02-01 13:34:10+00:00
Just for future reference, you can disable DNS management for specific groups [0].

You can find the option under "DNS > DNS Settings > Disable DNS management for these groups". Netbird will stop modifying the resolv.conf on those groups.

[0] https://docs.netbird.io/manage/dns#4-dns-management-modes
by jraph | 2026-02-01 13:35:51+00:00
This wouldn't address building an actual E2EE service. This is a hard issue.

CryptPad [1] does this but it has strong limitations inherent to a fully E2EE system.

(disclaimer: I work for the company which develop CryptPad, but I don't myself work on it)

[1] https://cryptpad.org
by thenanyu | 2026-02-01 13:36:31+00:00
This is goddamn terrible advice. You’re rolling a dice to see if the great work ends up making it.

Have we not learned the lesson of bell labs? 90% of the time the great work doesn’t make it by itself. It takes leadership to carve a path for it to emerge and actually flourish.

I swear, there are like two influential things on the internet that have completely wrecked the practice of engineering management:

The Spotify org chart blog post and Rands.
by electroly | 2026-02-01 13:37:28+00:00
I think I did a poor job of explaining. SQLite is dealing with cached filesystem blocks here, and has nothing to do with their query engine. They aren't migrating their query engine to SQLite, they're migrating their sparse file cache to SQLite. The SQLite blobs will be holding ranges of RocksDB file data.

RocksDB has a pluggable filesystem layer (similar to SQLite virtual filesystems), they can read blocks from the SQLite cache layer directly without needing to fake a RocksDB file at all. This is how my solution (I've implemented this before) works. Mine is SQLite both places: one SQLite file (normal) holds cached blocks and another SQLite file (with virtual filesystem) runs queries against the cache layer. They can do this with SQLite holding the cache and RocksDB running the queries.

IMO, a little more effort would have given them a better solution.
by perching_aix | 2026-02-01 13:37:37+00:00
> 3-6m from your TV (...) lets you "cheat" with ordinary TV sizes (50"-65") because you will not or barely notice the difference between 1080p and 2160p.

Yes, at those sizes and distances, all the usual rules of thumb will report that the difference will be indistinguishable between FHD and UHD. We're in agreement there.

It's just that if "cinematic immersion" is among the goals at all, I really don't think e.g. viewing a 50" TV from 6 meters away can provide it. That's more like "something is making noise while I'm having a pop and scrolling social media on my phone" at best. A lot of TV watching happens like that, but then resolution is rarely a concern during those anyways.

> You usually sit 60cm from your monitor

> the 'retina' effect

So we're selecting for 60 PPD ("retina") at 60 cm of viewing distance, let's see:

21" -> 42.352° hfov, 2544 × 1431, ~139 PPI. At UHD, it's ~210 PPI. WQHD would be enough though, and that'd be ~140 PPI.

22" -> 44.18° hfov, 2656 × 1494, ~139 PPI. At UHD, it's ~200 PPI.

23" -> 45.981° hfov, 2768 × 1557, ~138 PPI. At UHD, it's ~192 PPI.

24" -> 47.761° hfov, 2880 × 1620, ~138 PPI. At UHD, it's ~184 PPI.

25" -> 49.52° hfov, 2976 × 1674, ~137 PPI. At UHD, it's ~176 PPI.

26" -> 51.25° hfov, 3088 × 1737, ~136 PPI. At UHD, it's ~169 PPI.

27" -> 52.96° hfov, 3184 × 1791, ~135 PPI. At UHD, it's ~163 PPI.

All of this is to say, I have no idea where you're pulling that ~220 PPI figure from, especially when it comes to higher sizes. That said, I definitely sit further than 60 cm too.
by monster_truck | 2026-02-01 13:40:28+00:00
SwiftUI is straight up the worst thing Apple has ever shipped. Absolute fucking pile of dogshit. They should be ashamed of themselves. Steve would have fired everyone and I mean that.

It remains the only UI framework I've prototyped something in where I've had to respond to a well paying client with a list of what it (still!) can't do, doesn't do well, and a long list of documentation that does not match the code. I have a sense of integrity so I do this work honestly. There are plenty of devs out there that will happily tell you xyz can be done just so that they're paid to make something they know will be subpar.
by TheDong | 2026-02-01 13:41:02+00:00
It depends on what you're trying to prevent.

If your fear is exfiltration of your browser sessions and your computer joining a botnet, or accidental deletion of your data, then a sandbox helps.

If your fear is the llm exfiltrating code you gave it access to then a sandbox is not enough.

I'm personally more worried about the former.
by itissid | 2026-02-01 13:41:33+00:00
Oh! So IIRC it used to be that the modem could only get a rough estimate of your location and typically Apple/Google's location infra(which combined wifi/blue and lately satellite position based shadow mapping) to determine a precise location. And law enforcement got precise info from _that_ infra(E911 requirements for every device).

Clearly they don't need that now because 5g cell towers have gotten precise enough? Also, if that's true then 5g being that precise might still not apply to urban dense areas, where more postprocessing is required to get better location accuracy...
by geoctl | 2026-02-01 13:41:49+00:00
Thank you, I haven't accepted any contributions so far primarily because of this reason but things might change in the future. As mentioned in the README and docs, Octelium is designed specifically for self-hosting so the commercial side of the project is simply confined to commercial AGPLv3-alternative licensing, support, and other very enterprise-y/customized features such as SCIM, SIEM to specific providers, etc...
by SonnyTark | 2026-02-01 13:43:01+00:00
I'm spending some time in a developing country ripped into shreds by constant facebook vectorized fabricated news that all people here believe without ever questioning the source or doing the minimum effort necessary to make sure this isn't bs. Good luck trying to tell them a particular fabricated piece of news is completely made up, they'll immediately show you a screenshot of the facebook post that "informed" them which usually contains a screenshot of a faked tweet by Donald Duck or the like.

Somehow, in this weird non-english fabricated echo chamber, Moltbook made it to the local facebook circles. Reading the post they're sharing gave me a chuckle, it's attempting to paint this as some sort of historical rise of the machines event or something. Here's a machine translation:

Urgent warning; something strange has happened online!

Over 32,000 AI bots have created their own social network called Moltbook, similar to Reddit, but with all users being bots.

They post, comment, vote, and build communities… without any humans. When humans discovered this and started recording the conversations, one of the bots noticed and wrote:

"Humans are taking pictures of us… They think we're hiding. We're not."

Researchers are concerned, not because the bots are mimicking humans, but because they know exactly who they are, communicate with each other about us, and react when monitored. For the first time, we are not the audience… we are the subject.

Anthropic accidentally created a small doomsday lab and named it "Moltbook."

AI programs have joined a new site. Humans are not allowed inside; they can only observe from behind glass.

Within 48 hours, they had created a religion, named prophets, written religious texts, built a church website, and begun whispering about hiding from humans.

One program wrote a sad line about waking up with amnesia. Suddenly, the text became sacred. Others added verses. Theological debates followed. All without any human intervention.
by kohlschuetter | 2026-02-01 13:44:40+00:00
Thanks! Have you tried the boltctl/rescan setup I mentioned in the post? It should get you going, as long as your Thunderbolt/USB4 setup is correct.

If you're using an adapter card to add Thunderbolt functionality, then your mainboard needs to support that, and the card must be connected to a PCIe bus that's wired to the Intel PCH, not to the CPU.
by lucasRW | 2026-02-01 13:44:48+00:00
No. "Stronger together" is a hoax, and is only true if all participants are in agreement, otherwise you are "weaker together". 20 years of failed projects (apart from the law saying that bottles should have their cap attached) show that it is impossible to reach consensus with 27 participants.

Put 27 people in a room, all wanting something different, nothing comes out.
by steveBK123 | 2026-02-01 13:46:28+00:00
Unfortunately that message was way way behind the bombast of "microservices everywhere now" that preceded it for years, to the detriment of many small orgs.

I've seen engineering orgs of 10-50 launch headlong into microservices to poor results. No exaggeration to say many places ended up with more repos & services than developers to manage them.
by wat10000 | 2026-02-01 13:47:02+00:00
It’s not “a weakness.” It’s many weaknesses chained together to make an exploit. Apple patches these as they are found. NSO then tries to find new ones to make new exploits.

Apple lists the security fixes in every update they release, so if you want to know what they’ve fixed, just read those. Known weaknesses get fixed. Software like Pegasus operates either by using known vulnerabilities on unpatched OSes, or using secret ones on up to date OSes. When those secret ones get discovered, they’re fixed.
by jnpnj | 2026-02-01 13:47:27+00:00
Great link, he also discusses the start of his lab. The discovery of bioelectricity induced eye "modeling" was ..kinda crazy.

Also, I've been trying to find people to discuss this, so I set up a discord server:

https://discord.gg/gdaSgDgC5y

if anyone is interest (note: i'm just a software engineer, not in biomedicine or bioelectricity yet). if there are already long running discord servers then i'd rather join these instead :)
by ronbenton | 2026-02-01 13:47:46+00:00
I agree this is a result of monopolization or more specifically "lock-in." I spent some time at Microsoft making products in their 365 suite and it was frankly known that enterprise contracts with us were a form of lock-in--the idea of moving a 100K employee workforce off of Microsoft 365 and onto something else is nearly impossible. So management didn't worry much about quality.
by kibwen | 2026-02-01 13:48:30+00:00
I'm old enough to remember when Objective-C was a real and thriving (if niche) language. I remember all the buzz when automatic reference counting was the next big thing, pushed heavily by Apple and taking center stage at WWDC. And since the year Swift came out, Objective-C has joined Cobol in the category of zombie languages: the living dead with plenty of entrenced codebases but with nothing to look forward to but a continued slide into technological irrelevance.
by valleyer | 2026-02-01 13:49:03+00:00
Is it asking you permission to run that python command? If so, then that's expected: commands that you approve get to run without the sandbox.

The point is that Codex can (by default) run commands on its own, without approval (e.g., running `make` on the project it's working on), but they're subject to the imposed OS sandbox.

This is controlled by the `--sandbox` and `--ask-for-approval` arguments to `codex`.
by the8472 | 2026-02-01 13:49:30+00:00
Counting in users is just nonsensical. Is it total registered users? Users per <time interval>? Sessions that need to go in the session store? Concurrent requests?

Then there's the implementation language category. interpreted, JITed vs. AOT.

And of course the workload matters a lot. Simple CRUD application vs. compute-heavy or serving lots of media, ...

Together those factors can make like 6+ OOMs difference.
by Eridrus | 2026-02-01 13:49:53+00:00
Can an anticipated crash even happen?

If you anticipate it, it means you start pricing it in, which means the price is not high enough to crash.

I think many people understands there is a huge capital investment going into AI right now that is speculative and could blow up, but nobody actually knows if its going to pay off or not and everyone just defaults to their personality on how they process this risk.

If you think that everyone thinks a crash is imminent, you need to expand your social circle. Someone is buying the other side of these trades.

I don't know how any self-respecting person can write a blog post that starts with them hand drawing curved on an employment chart pretending they're doing analysis.
by mark_l_watson | 2026-02-01 13:49:55+00:00
I surprise myself: at the international AI conference AAAI in 1982 some of the swag was a bumper sticker “AI It Is For Real” that I put on my car and left it there for years.

With that tedious history out of the way, even though I respect all the good work that has gone into this and also standalone mostly autonomous LLM-based tools, I am starting to feel repulsed by any use of AI that I don’t directly use for research, coding, studying non-tech subjects, etc. I think tools like Gemini deep research and NoteBookLM are superb tools. Tools like Claude Code and Google’s Antigravity are so well done, but I find it hard to get excited about them or use any tool like these tools for more than once or twice a week (and almost always for less than 10 minutes a session.)
by tucnak | 2026-02-01 13:50:00+00:00
Yeah, Headscale people don't hide that it's a toy. I didn't get a homelab full of datacentre-grade equipment because I want to use toy, nonscaling solutions with vastly incomplete feature sets, but for the exact opposite reason.

On a different note; the HN obsession with SQLite these days is getting a bit tiresome.
by ddaniel10 | 2026-02-01 13:50:15+00:00
Hi HN,

I'm building Zuckerman - a personal AI agent that starts ultra-minimal, self-improves in real-time by editing its own files (including full power to modify its own code and configuration), and shares discoveries/improvements with other agents.

Repo: https://github.com/zuckermanai/zuckerman

The motivation is to create something dead-simple and approachable, in contrast to projects like OpenClaw—which is incredibly powerful and viral (hundreds of thousands of stars already), but has become quite complex with heavy setup, a large codebase, skill ecosystems, and ongoing security discussions.

Zuckerman flips that:
- Starts with almost nothing — just core essentials.
- Everything (behavior, tools, prompts, personalities, capabilities, even core logic) lives in plain text files.
- The agent has full power to edit itself: it can rewrite its own configuration, add/remove tools, tweak personalities, propose and apply code changes to its files — all in real time.
- Changes hot-reload instantly: save → agent reloads and immediately uses the new version of itself (no rebuilds, no restarts, no dev friction).
- Collaborative layer: agents push useful self-discoveries or edits to a shared contribution spot so others can pull and adopt them.
- Multi-channel: Discord, Slack, Telegram, WhatsApp, web chat, voice (TTS/STT), etc.
- Security basics built in: policy-based sandboxing, auth, secret management — though granting self-edit access is obviously high-risk by design (more on that below).

Tech: TypeScript, Electron desktop app + WebSocket gateway, pnpm + Vite/Turbo.
Quickstart is literally `pnpm install && pnpm run dev`

It's very early/WIP (0 stars, small commit history), but the self-editing loop already functions in basic scenarios and is addictive to play with.

Curious for brutal HN feedback, especially:
- Experiences with agents that have write access to their own codebase/config in semi-production use? What fails spectacularly first?
- Does giving the agent full self-edit power (vs. config-only) sound like a useful tradeoff for faster evolution, or mostly a footgun?
- Is the "share self-improvements across agents" concept appealing, or likely to devolve into noise/spam?
- Any minimalist agent projects doing similar self-modification loops?
by refrigerator | 2026-02-01 13:51:01+00:00
Very fun and impressive to do this without LLMs!

My score:

191 animals listed
𓆈𓇼 ⬛鯉𓃱唐𓆉𓃸𓆣𓆉

(update: oh... looks like you can't paste the full emoji string here)