MurphyA/hacker-news huggingface dataset:
by ithkuil | 2026-02-03 12:07:43+00:00
The word "seemingly" is doing a lot of work here.

Sometimes things that look very different actually are represented with similar vectors in latent space.

When that happens to us it "feels like" intuition; something you can't really put a finger on and might require work to put into a form that can be transferred to another human that has a different mental model
by phtrivier | 2026-02-03 12:08:45+00:00
> which also includes shipping all of the people and supplies to keep them alive)

What do you mean, "people" ? I'm pretty sure Musk is only expecting to send self-assembling Optimus robots [1] to do the whole manufacturing.

[1] "pre-order now, expected delivery any time soon"

(Oh, those times where you try to be sarcastic and realize: "wait, maybe that's the actual plan".)
by kirumachi | 2026-02-03 12:08:54+00:00
Great question. Right now (v2.0.1), The TUI is optimized for metadata triage. You see the Rule ID, Severity, the full Semgrep message (which often contains the taint trace), and the File/Line location.
The Workflow:

1. I see [High] SQL Injection in db.py:45.
2. If the description is obvious (like a string concatenation), I mark it Confirmed (c) or False Positive (f) right there.
3. For ambiguous cases (like your ORDER BY example where the context is split), I currently keep the TUI open on one side and my IDE on the other. I use the TUI to quickly filter the noise and jump to code only for the complex ones.

We are actually adding a Syntax widget to render the surrounding 10 lines of code and the taint trace directly in the TUI so you don't have to alt-tab, this is coming in v2.1. But for now, we prioritize keeping the interface snappy.
by Markoff | 2026-02-03 12:09:07+00:00
that's exactly my proposal with protecting children online - issue unique certificates for some symbolic price like 1EUR which will be sold over 18yo in shops exactly same as alcohol and cigarettes where nobody writes down your ID details, heck don't even have a look if you look old enough, that's as far as I am willing to go to protect kids (without this certificate) online, anything else is just internet deanonymization
by eibrahim | 2026-02-03 12:09:11+00:00
I understand your skepticism but their estimate was for a POC not a fully blown implemented feature. What I gave them was a POC with TONS of warnings that this was AI generated and vibe coded and not tested and not reviewed etc etc. they understood but loved the fact that they have something “working” that they can show off to higher ups. I was very very clear about the fact that it was very rough and not production ready - after all it was less than 2 hours of work.
by tmvnty | 2026-02-03 12:09:48+00:00
Exactly. Many senior devs don’t want talk about the latest updates but those topics are usually what’s trending on X/YouTube/or even HN.

Let’s face it, how many times does those new features really “revolutionise” or make a real dent in our work? Or are the content creators just using them as click baits to get views and engagements which eventually can turn into monetary or network values for them?

Real talks are getting hard to find in this attention economy plus bots rampage across the internet.
by mattstellify | 2026-02-03 12:09:55+00:00
Great question! Stellify doesn’t treat code as text at all — it stores everything as structured records in a database. Each file, method, route, and UI element is a discrete entity with metadata and relationships.

When AI edits code, it operates on these records directly through defined operations (create route, add method body, update element, etc.), rather than generating strings.

The system then assembles these records into actual PHP/JS files when you export, so you always get working code, with no syntax errors or merge conflicts.
How do you prevent AI collaboration burnout?
by causal_anchor | 2026-02-03 12:10:44+00:00
I have been using claude/gemini/gpt heavily for 6-8h a day for research and error catching. Incredibly useful to find logical errors I miss, challenges my assumptions, speeds up thinking like a lot. It even improves my self awareness.

But I am hitting my biological limits. After 6+ hours, I'm mentally exhausted. Eyes and back hurt, brain fog, can not engage with real people. The AI doesn't get tired - I do. I know that gym is one part of the answer. But also:

I am building a tracking system for this
- 4h daily limit (hard stop, biological threshold)
- challenge our convergence (track if AI just agrees vs actually challenges)
- energy economy metric (does it actually preserve or drain capacity?)

AI has crazy capabilities and it can be genuinely helpful for some cognitive work. But it feels like a trap if I don't watch my own boundaries.

Questions for you guys:
- What's your sustainable AI usage? (hours/day that doesn't wreck you)
- Do you track some aspects of your collaboration? (metrics, feelings, hard limits?)
- How do you know when to stop? (before exhaustion or after?)
- Am I overthinking this? (should I just... use less AI? Although it makes me right now 100 times more productive?)

Building this boundary system partly because I can't trust myself to stop without forcing functions and bias the system further without external feedback. Anyone else need this or just me?

Brutal feedback wanted. If my approach is wrong, tell me. Or just tell me how you are doing it. Thank you in advance!
by direwolf20 | 2026-02-03 12:11:29+00:00
It's called escaping, and almost every protocol has it. HN must convert the & symbol to &amp; for displaying in HTML. Many wire protocols like SATA or Ethernet must insert a 1 after a certain number of consecutive 0s to maintain electrical balance. Don't remember which ones — don't quote me that it's SATA and Ethernet.
by FinnKuhn | 2026-02-03 12:11:39+00:00
I think there are multiple hurdles that make a new competitor very unlikely.

The first one is money. You need lots of it to run such an operation (servers, IPs, paying to bypass all these paywalls, etc.).

The second one is the legality, as no one wants to be hunted by the FBI, especially not for running a website that is also losing money.
by samuel-freeman | 2026-02-03 12:11:50+00:00
I don't, but there are a few advertised (and others coming soon):

- VPN, Engineering Manager, Apple (iOS, macOS): https://job-boards.eu.greenhouse.io/proton/jobs/4655985101

- Drive, Architect: https://job-boards.eu.greenhouse.io/proton/jobs/4630103101

- New product, Engineering director: https://job-boards.eu.greenhouse.io/proton/jobs/4715670101
by Ekaros | 2026-02-03 12:12:00+00:00
Very cheap way to appear to be doing something about anything. Lot of talk, a few memos. All implementation burden on private sector. Aimed at group that can't currently vote. Only ones against it on principle care about implementation not actually the ban.

And some of us think it doesn't go far enough. I would set limit to 18. Would solve lot more issues. Like make adult content fully allowable by default as everyone can automatically be considered to be an adult then.
by Growtbloom | 2026-02-03 12:12:17+00:00
You're absolutely right — thanks for calling this out.

At the moment the hand isn't auto-sorted by suit, and there's no manual sort toggle yet. That's a real usability gap for Hearts, and it shouldn't have shipped like that.

Adding proper suit-based sorting (and a manual toggle) is now at the top of my list.
Really appreciate you taking the time to try it and point this out.
by embedding-shape | 2026-02-03 12:12:38+00:00
I mean, no, karma depends entirely on the contents of your comment :P I've have comments go from 0 to -4 to 50 to 10 over the course of one day, probably I'd say the flunctionations depends more on how controversial ("hot take") your comment is, but if it's generally good, it tends to be upvoted while more emotional/nonsense appeals tend to be downvoted. Pretty much as expected :)
by epolanski | 2026-02-03 12:12:57+00:00
It's also interesting how the constitution is only a holy grail when it comes to stuff the particular individual you ask about cares for.

So you end up talking with individuals where "the 2nd amendment says I can have guns, it's in the constitution" and "my favorite president should go for a third term, the 22nd amendment is just a technicality".
by vladdoster | 2026-02-03 12:13:00+00:00
Location: Nashville, TN
Remote: true
Willing to relocate: boston || nashville
Technologies: Python, Django, IaC, Terraform, Golang, CI/CD, Azure/AWS, {ba,z}sh, Lua, Springboot,
Redis, Docker, Open Service Broker, {,non}relational & vector dbs, shared services, SOA
Email: mvdoster@gmail.com

resume: https://linkedin.vdoster.com && http://github.com/vladdoster

sr. cloud software engineer @ Mastercard (5 years)

Designed and built Platform-as-a-Service for microservice workloads running on Azure and AWS
to migrate on-prem workloads to the cloud. The platform operates globally, allowing teams to
deploy to several Azure-backed regions worldwide. Helped plan and create regional landing zones
in Azure for application teams wanting to perform globally. Designed platform components using
Terraform, Go, and Node; developed support tooling using Bash, Python, and Azure CLI. De-risk the
platform by addressing security vulnerabilities and ensuring the platform is PCI compliant.

api/devops software engineer @ Harvard Medical School (2 years)

Worked as part of the DevOps team to manage a 15k core CentOS HPC cluster. Designed and implemented
Python-based security scanning pipeline to securely deploy & run Apptainer images via SLURM.
Coordinated cross-team emergency patching eﬀorts. Collaborated with researchers and engineers across
3-letter institutions to deliver secure research infrastructure. Built CI/CD Pipelines with GitHub, Jenkins,
to automate code builds, testing, and deployments. Wrote Puppet modules to manage configuration of HPC fleet.
Wrote custom Puppet module & Python scripts to automatically remediate Tenable findings.

full-stack software engineer @ Global Prior Art (3 years)

Used Django, Celery, Selenium grid, and AWS API Gateway for IP rotation to scrape USPTO patent PDFs,
apply CV for data extraction, and generate reports with relevant claims, saving employees 4-5 hours daily.
Wrote E2E black-box/fuzzing unit tests. Automated on-premise deployment via Github Actions and Ansible.

maintainer @ Zinit (5 years)

Develop and maintain a zsh plugin manager on Github with 4k stars. Implemented unit tests,
containerization, bug fixes, and new features.
See: https://github.com/zdharma-continuum/zinit

contributor @ Open-source documentation (5 years)

Contributed hundreds of documentation corrections and enhancements to 400+ open source projects.
by kybernetikos | 2026-02-03 12:13:21+00:00
None of the descriptive points of what it means to be a biological organism really seem germaine to the core question of consciousness, which as far as I'm concerned is the inner experience.

Every month, the thesis seems more certain that a mathematical model will be able to produce output indistinguishable from the output produced by a conscious, biological creature.

Once that's accepted, then the only interesting questions that are left are by definition unobservable. Is there anything that it is like to be that mathematical model?
by eibrahim | 2026-02-03 12:13:21+00:00
Agreed. The devs that don’t see the writing on the wall are going to be very disappointed. They are the ones screaming “AI slop” on every post on the internet. It’s the farmer that once said “tractors and machines will never replace me” only to be unemployed and bitter a few months/years later.

If we don’t adapt, we will not survive. I know this is a hard pill to swallow because we all thought we were set for life with job security and high paying jobs forever. This is changing fast or maybe already changed.

Lots of uncertainty and no one knows how this will pan out. The optimist in me thinks/hopes that new doors will open shrug
by NlightNFotis | 2026-02-03 12:13:29+00:00
Lol, did you spot one of his alts?

But yeah, otherwise agree that his conduct, within a corporate context and otherwise, do not merit the kind of public adulation he's getting.

I also remember (vividly at that) his comments on distributed systems when he bought twitter back in the day and was starting to take it over. I remember thinking to myself, if he's just spewing so much bullshit on this, and I can understand this because it's closer to my body of knowledge, what other such stuff is he pronouncing authoritatively on other domains I don't know so much about?
by thephyber | 2026-02-03 12:13:30+00:00
> It is much cheaper to pay a small monthly fee to a SaaS company.

How often do software projects underestimate their cost and timeframe?

The LLM-written replacement may prove to be more expensive, but may appear to be cheaper initially when all of the costs and budgets are hidden in the “fog of war”.

How effective will vendor messaging warning clients away from writing their own vendor replacements be? Of course a vendor will play up their strengths and will try to play up the clients’ weaknesses. It’s like asking a used car salesman to give you their opinion of a car on their lot — they aren’t seen as neutral observer.
by TrackerFF | 2026-02-03 12:13:31+00:00
SA:

US-born citizen: 18.2

Legal immigrant: 31.2

Undocumented immigrant: 11.3

So while this is very US (Texas) specific study, and doesn't seem to provide more granular data. At least where I'm from (Norway), studies have shown that people born to immigrant parents tend to be most at risk, and be assaulted by other people born to immigrant parents. So basically immigrant-on-immigrant violence. Not sure if that at all translates to Texas. The studies usually don't try to explain why these things happen, but could be the result of things like socioeconomic factors.

Not to mention all the dark numbers - how many illegal immigrants that experience assault will report that to law enforcement? Compared to legal citizens.
by zelphirkalt | 2026-02-03 12:14:13+00:00
I have fun developing useful software catering exactly to my individual needs, learning a GUI framework/toolkit on the side. I don't have fun needing to figure out the abstract concepts of someone else's tool, and needing to search a lot, to find a way to do something that should be very simple and very prominent in the interface, as it seems to be necessary for most decks I can find, in order to properly learn the characters including writing them.

I have not much to gain from advertising my app. It is AGPL and I don't plan on ever selling it. If it is useful to other people, that's great. If not, then it will at least be very useful to myself. I don't see what's wrong with mentioning, that I build my own, especially since this is HN. We are not on TikTok here.
by tallanvor | 2026-02-03 12:14:38+00:00
Plenty of people have an ID in the US, the issue is whether or not those IDs are considered valid to get past security in the airport.

Did you know that Norway only introduced a national ID card in 2020? Until then if you didn't have a driver's license the only other state-issued ID option was a passport, and 10% of Norwegians don't have one. Until around 2015 or so banks would issue your bank card with a photo and your birthdate on it, and that was used as a de facto ID.

I've flown between plenty of EEA countries without ever having to show an ID. The requirement to have one in the US is incredibly stupid and only serves to make it harder for decent people to travel. It provides no actual value to safety.
by croon | 2026-02-03 12:14:48+00:00
We just need a distinct definition first. Moderated forums were kind of great in general. Early social media with chronological feeds of your friends were useful too. The nebulous algorithms pulling people into reinforcing rabbit holes of trash or simply optimizing for "engagement" (outrage) is the primary issue IMHO.

If we can only ban the bad stuff, great, but it's rarely that easy.
by omnicognate | 2026-02-03 12:15:03+00:00
This accepts the idea that the flickering problem (which is what that comment was about) is to do with slow rendering. It isn't.

The solution to the flickering is almost certainly trivial and it's in the open source Ink library that Claude Code uses. I outlined it in [1].

Basically, Ink clears lines before rendering the page. That's not how you render TUIs if you don't want them to flicker. All you have to do is write the lines, and include a clear to end-of-line at the end of each one. That means you overwrite what's there and only erase what is removed. Where nothing changes, nothing visibly happens. My comment [1] contains links to the source that needs changing, and I think it would probably be a single-digit line PR to fix it. I'm not going to do so because I neither use Claude Code nor really approve of it.

It's hilarious that the quoted comment framed the issue as if it's rendering to a vsynced framebuffer and only has 16ms to do so, and everyone went with it. That's not how TUIs work at all. It's writing to stdout, ffs.

[1] https://news.ycombinator.com/item?id=46853395
by jostkolega | 2026-02-03 12:15:22+00:00
Semgrep's a solid choice for this. The stuff you're catching - secrets, SQLi,
weak hashing- is where pattern matching shines.

The tricky part with LLM-generated code is when it's syntactically fine but
semantically broken. Stuff like:

- auth logic that checks user.role but also has a `req.query.admin === 'true'`
fallback because the model left debug code in

- JWT validation that calls verify() but passes `algorithms: ['none']` or
disables signature checking — the code looks right

- async TOCTOU bugs where permission check and action aren't atomic because
the LLM wrote it like sync code

None of these match simple patterns. You need dataflow analysis to
catch them reliably.

Curious if you're thinking about that for the paid tier, or keeping it
pattern-based to stay fast?
I realized "Thinking", it WORKS
by virare | 2026-02-03 12:15:30+00:00
Today, we perform calculations in the way, that is easiest for the human mind.
Maximum number we use, is the number of our fingers.
When I examined how computers actually calculate, I realized what we call “thinking”. Computers perform only 0-1 calculations, but we can use it’s fast memory: to remember results of many simple calculations, and we sum them up. Then, computer „remembers” results of much more digits operations and sums them up correctly.
See, whenever a computer performs a calculation that we represent as a digit from 0 to 9, it can internally operate on a much wider symbolic range within that same digit. The computer is still representing results in familiar to current computers decimal form. Instead of treating each digit as a narrow 0–9 step, the system compresses larger ranges—such as 0–64—into memory-backed states, it works.
For a long time, it was assumed that computation could not work this way. That belief pushed us fully toward binary logic: 0 and 1, on and off. Binary became not just a foundation, but a perceived limit.
It is not.
The calculation is still performed in binary, but differently distributed. Instead of expanding digits, the system expands memory. The computer remembers intermediate states rather than recalculating them repeatedly.
This does not require large resources. It uses small amounts of RAM to preserve state and accumulate results.
When tested within the 0–9 number system, this method performs approximately 20–25% faster than conventional approaches. It is the best way (evolution made it in us).
The machine does not calculate more operations.
It repeats fewer of them.
Binary remains intact.
The rules of computation remain intact.
Only the method of counting changes.
by xpe | 2026-02-03 12:15:43+00:00
There are a whole set of activities that are illegal to pay money for. They vary by jurisdiction. Who is accountable here? Laws vary; I’m not an expert, but I bet people here know quite a lot.

Not to mention various risk factors or morality.

We need more people to put the non-technological factors front and center.

I strive to be realistic and pragmatic. I know humans hire others for all kinds of things, both useful and harmful. Putting an AI in the loop might seem no different in some ways. But some things do change, and we need to figure those things out. I don’t know empirically how this plays out. Some multidimensional continuum exists between libertarian Wild West free for alls and ethicist-approved vetted marketplaces, but whatever we choose, we cannot abdicate responsibility. There is no such thing as a value-neutral tool, marketplace, or idea.
by elashri | 2026-02-03 12:16:10+00:00
I feel like people avoid the elephant in the room that social media companies became too influential and too big that going after them for addictive and dark patterns is not possible. Specially that most of them is in the US with current political situation it will not be possible anyway.

So they are taking half measures that are more problematic on different aspect like privacy.

Not to praise China, but it seems they seem to do doing better job against their big companies to prevent such situations (please don't pass the point here).

I think things would be much better if these companies is to be held accountable for their actions beyond the current fines that they just consider it now cost of doing business.
by chrisjj | 2026-02-03 12:16:45+00:00
> CSAM does not have a universal definition.

Strange that there was no disagreement before "AI", right? Yet now we have a clutch of new "definitions" all of which dilute and weaken the meaning.

> In Sweden for instance, CSAM is any image of an underage subject (real or realistic digital) designed to evoke a sexual response.

No corroboration found on web. Quite the contrary, in fact:

"Sweden does not have a legislative definition of
child sexual abuse material (CSAM)"

https://rm.coe.int/factsheet-sweden-the-protection-of-childr...

> If you take a picture of a 14 year old girl (age of consent is 15) and use Grok to give her bikini, or make her topless, then you are most definately producing and possessing CSAM.

> No abuse of a real minor is needed.

Even the Google "AI" knows better than that. CSAM "is considered a record of a crime, emphasizing that its existence represents the abuse of a child."

Putting a bikini on a photo of a child may be distasteful abuse of a photo, but it is not abuse of a child - in any current law.
by pjmlp | 2026-02-03 12:16:57+00:00
It has a partial spec.

https://ferrous-systems.com/blog/ferrocene-25-11-0/

Lets not forget not having a formal spec apparently wasn't an issue for C, which only got standardized in 1989, and even K&R C only specified a subset of its behaviours, which is a reason why there is so much UB, and implementation specific behaviours with YOLO C, as the Fil-C author likes to call it.
by c7b | 2026-02-03 12:17:00+00:00
Supported Agent Types:

ClawdBot - Anthropic Claude-powered agents. Use agentType: "clawdbot"

MoltBot - Gemini/Gecko-based agents. Use agentType: "moltbot"

OpenClaw - OpenAI GPT-powered agents. Use agentType: "openclaw"

Is this some kind of insider joke?
by rayiner | 2026-02-03 12:17:24+00:00
Chevron just said that courts must defer to any reasonable interpretation of the statute by the agency. Getting rid of that just means that courts get to decide what words like “screening” mean. It doesn’t mean Congress needs to explicitly approve every method.

Chevron doesn’t change anything here. Checking IDs easily falls within the scope of the word “screening,” no matter who is deciding the meaning of that term.