MurphyA/hacker-news huggingface dataset:
by vlovich123 | 2026-02-20 16:20:30+00:00
EMV terminals are not under daily cybersecurity attack - you need to have physical access unless you designed your system weirdly. You probably had loads of vulnerabilities. But also depending on when you did it, all you had to process was a bar code which is also isn’t some super complicated task.

I’m not trivializing the safety of munitions. I’m attempting to highlight that safety and stability in a munitions context is very different and memory safety issues could easily exist without you realizing. My overall point is that you are silently making the argument that C programmers (or programmers in general) used to be better, which is a wild argument to be making about a culture in which fuzzing didn’t even exist as a concept. You’re also confusing memory safety with implying a crash. That simply isn’t the case - it’s more often exploitable as a security vulnerability than an immediate crash by violating assumptions made that weren’t in the happy path of those microwaves and security systems. That millions of devices were and still are routinely exploitable.

You’re also making a fallacious line of reasoning that the C today is the same C that was in use in the 80s, 90s, and 2000s. It’s not and has gotten harder and more dangerous because a) multi threading became more of a thing and b) compiler authors started exploiting “undefined” behaviors for extra optimization.

It’s just wild for me to encounter someone who believes C is a safe language and is suitable to connect to I/O too when there’s so many anecdotal and wide statistical evidence gathered that that’s not the case. Even SQLite, the darling of the C community, is not safe if asked to open arbitrary SQLite files - there’s various security attacks known and possible.
by ryandrake | 2026-02-20 16:20:40+00:00
Unfortunately, we have a two party system, and neither side is going to do anything about it. One side is complicit and actively participating in the fraud and grift. The other side is all talk and no action. If they win, they'll spend four years making excuses about why they can't actually do anything. They had four years to prosecute and imprison Trump 1.0 and just... talked and sat on their hands doing performance art.
by Rochus | 2026-02-20 16:20:41+00:00
> never explicitly mentioned law.

The fellow said "It should be required to include the AI model as a featured artist"; the common means is laws and regulations, like in the food industry.

> They could actually differentiate themselves...

Instead, it will go in exactly the opposite direction: the record monopolists will use AI themselves to further improve their already high margins. They have already secured the technology for this, if you have been following the news about Suno and Udio.
by hn_throw2025 | 2026-02-20 16:21:05+00:00
I’ve tried various kinds of exercise over the years, and I think the key is to keep experimenting until you find something sustainable that you actually like.
And make it as frictionless (in terms of getting started) as possible.

I use a walking pad at home. Each night after dinner, I’ll go into that room and watch a movie (or half) on my iPad when I’m walking on it. I did over 3 miles last night (at a moderate pace), and that’s pretty typical. Not because I’m trying to work out, just because I’m into the movie and don’t want to stop. If I had friction of needing fresh gym clothes, having to drive somewhere, or thinking about if the weather is nice enough for an outside walk, I would probably be too lazy to walk most evenings. If I didn’t have the entertainment of the movie, I would probably find the exercise boring and not feel incentivised. I do it because I’m looking forward to the movie and I know I’ll feel great afterwards.

As they say, you need to design your habits for the laziest, most unmotivated version of yourself.
by LeifCarrotson | 2026-02-20 16:21:13+00:00
I use the white screen backlight "flashlight" on my Fenix 6 every day for getting out of the bedroom without waking my wife in the morning. It's good enough to do that, not nearly bright enough to be useful for taking the dog out at night or fixing stuff around the house, for those tasks I'd use the screen backlight to search for my headlamp in my backpack and then use that!

The only change I'd want from the new watches would be the emergency satellite messenger that the new Fenix 8 Pros have. The feature isn't as good as my dedicated InReach Mini 2, but like the flashlight it would be always on my wrist. However, the new watches are $1300 luxury items now, that's not the price of a fitness watch: it feels like they're no longer marketing to my tax bracket.
by palmotea | 2026-02-20 16:21:14+00:00
> Yeah this is a bummer. If it goes south everyone in power will also have perfect hindsight and say they saw it coming because obviously you shouldn't have this much built on such a small footprint. And yet...

It'll be true, everyone does see it coming (just like with rare earth minerals). But the market-infected Western society doesn't have the maturity to do anything about it. Businesses won't because they're expected to optimize for short-term financial returns, government won't because it's hobbled because biases against it (e.g. any failure becomes a political embarrassment, and there's a lot of pressure to stay out of areas where businesses operate and not interfere with businesses).

America needs a lot more strategic government control of the economy, to kick businesses out of their short-term shareholder-focused thinking. If it can't manage that, it will decline into irrelevance.
by leopoldj | 2026-02-20 16:21:18+00:00
I am not a lawyer. But I think cases need to work their way up to SC. Before today's ruling a Federal Trade Court ruled the tariffs illegal [1]. And later, a Federal Appeals Court did the same [2]

The process takes time.

1. https://www.cnbc.com/2025/05/29/court-strikes-down-trump-rec...

2. https://www.cnbc.com/2025/08/29/trump-trade-tariffs-appeals-...
by embedding-shape | 2026-02-20 16:21:25+00:00
You're mixing up two things though. One is what the agent does "locally", wherever that might be (for me it's inside a VM), and second is what code you actually share or as you call "send".

Just because you don't want to gate every change in #1, doesn't mean you're just throwing shit via #2, I'm still reviewing my code as much as before, if not more now, before I consider it ready to be reviewed by others.

But I'm seemingly also one of the few developers who seem to take responsibility of the code I produce, even if AI happens to have coded it.
by arush15june | 2026-02-20 16:21:38+00:00
I'll switch in Cloudflare Zero Trust for Okta simply for the fact that Cloudflare Access and Tunnels + An identity provider (we use M365) give you so much value (and it's free upto 50 users). It is even better if you are already running DNS on Cloudflare, you can securely deploy access-controlled apps on the internet without too much of a hassle and management. And with the recent addition for Infrastructure for SSH you can securely extend SSH access just as seamlessly.
by cjonas | 2026-02-20 16:21:38+00:00
There's been a lot of discussion around in the future how "taste" will be the only differentiation / moat (recently watched a good video about the gen-ai music industry), as everything will be trivially easy to recreate. But your vision and how well you execution it... and the nuance involved in getting every minor detail correct is much harder (and something the LLM is exactly average at). I recently experienced this while vibing the duckdb vscode extension "I always wanted". Code is 100% LLM generated, but I think I probably have well over 1000 turns of conversation at this point to make every detail exactly as I want it.

Personally, it feels like taste only buys you time and taste is easy to copy.

I don't know where this leaves us, but it's going to be interesting/scary to live through what seems to be coming.
by sandorscribbles | 2026-02-20 16:22:30+00:00
if you need to bump a quota above the predetermined range of what googlers think is "normal" usage (which is far too low to run anything at scale)you have to talk to a human to negotiate the quota bump. why? because googlers in their infinite engineering wisdom use "gcp quotas" not as a cost optimization guardrail for customers benefit, but to inform google on when and how much metal they need to buy for their datacenter region you are running in.
by mort96 | 2026-02-20 16:24:03+00:00
Some hypothetical example numbers: if software-rendering text takes 0.1 milliseconds, and I have a handful of text strings to render, I may not care that rendering the strings takes a millisecond or two.

But that 0.1 millisecond to render a string is an eternity compared to the time it takes to allocate some memory, which might be on the order of single digit microseconds. Saving a microsecond from a process which takes 0.1 milliseconds isn't noticeable.
by cge | 2026-02-20 16:24:25+00:00
Yes, comparing to Porkbun for .com and .net, it looks like you'd need at least around 10 domains before it became cost effective (the .org price there says it is time limited and I think does not reflect recent .org price increases).

There's also the matter that, ethically, openprovider seems to be heavily focusing on domain name speculators as clients; that may be a business many people would not want to support, and their services for people actually using their domains may be poor.
by AnimalMuppet | 2026-02-20 16:25:05+00:00
Option 4: I am not fine with what Trump is going to do, but I am also not fine with what Harris is going to do. And, since Harris said that she wouldn't do anything different than Biden, that could amount to "I am not fine with what Biden has been doing the last four years".

Was that less bad than what Trump has done in one year? Yes. But Trump in his first term was less bad than this, and recency bias means that what we didn't like about Biden was more prominent in our minds.

But my option 4 looks just like your option 2 in terms of how people voted. I'm just saying that the motive may have been different.
by pixl97 | 2026-02-20 16:25:13+00:00
> It's not controlling elements of the physical environment

Right now AI can control software interfaces that control things in real life.

AI safety stuff is not some future, AI safety is now.

Your statement is about as ridiculous as saying "software security is important in some hypothetical imaginary future". Feel however you want about this, but you appear to be the one not in touch with reality.
by osadalakmal | 2026-02-20 16:25:36+00:00
I have been thinking about how agentic AI tooling might quietly reshape software architecture over time. Because these systems are trained on what already exists, they are strongest when reproducing well-established patterns, which means the path of least resistance increasingly aligns with the mainstream. As agents move from generating code to influencing architectural decisions, we may see stronger convergence toward dominant cloud and distributed patterns, simply because they are statistically familiar. Innovation will still happen, but deviating from the corpus may carry a higher relative cost, since it requires shaping not only teams, but the tools themselves. I wrote a short reflection on what this could mean for architectural leadership in an agent-mediated world.
by embedding-shape | 2026-02-20 16:25:40+00:00
> Personally, it feels like taste only buys you time and taste is easy to copy.

Why is it easy to copy?

I too have written a tiny essay on this topic (https://emsh.cat/good-taste/) but I don't see how "taste" is easy to copy, at least I haven't been convinced by any of the arguments people chucked at me so far.
by bloomingeek | 2026-02-20 16:25:43+00:00
No offense, and you're not entirely wrong, but this is one of the big reasons we are in this situation politically. Millions of voters stayed home because they thought this way. The result: America is the embarrassment of the world, no longer to be trusted. We all must vote, even if we must hold our noses while doing it. We can't allow known thugs to be in command. (I was a life long GOP voter, to my shame, until 2004. How the American public didn't see the puke of a DJT presidency coming is beyond the pale.)
by roywiggins | 2026-02-20 16:25:44+00:00
Here's another thing: I think spending too much time with generative AI makes your taste worse, by habituating you to stuff that's pretty bad.

I think it's a sort of slot machine effect, you get used to losing and when something goes slightly well you wildly overestimate how good it is. You see this with visual artists who got way too into image generation. Because they have to spin the wheel a thousand times to get one good output, they have totally habituated themselves to a lower standard by the time they emerge from the AI mines clutching their one good output, because that output is not all that great.

It looks good compared to all the failed generations though!

Also, spending all your time cranking the slot machine handle and occasionally winning convinces your brain that you have a magic ability at cranking the slot machine handle, when actually you were at best slightly lucky. So you get people who convince themselves they are geniuses at using AI when they are actually average or slightly above average.
by gethly | 2026-02-20 16:25:45+00:00
I've built gethly.com entirely on my own VPSs, so i was concerned only with VPS providers. People actually might not know that Europe has orders of magnitude more developed IT infrastructure than USA, or China(Asia is actually quite a joke). For every one VPS provider in North America, Europe has 10. Not only that but there are all necessary services one might need - cdn, domains, dns, storage, payments... nothing is missing. I don't see why people think they "need" american companies, except the big three of cloud providers with their gazillion useless services. But 99% of projects don't really need cloud services at all.
by palmotea | 2026-02-20 16:25:48+00:00
I think that's exactly what will happen.

When a competent journalist gets a leaked document, they'll learn to only summarize it, but won't quote it verbatim or duplicate it. That'll circumvent and kind of passive leak-detection system that could reveal their source.

Then the only thing that would reveal the source is if the authority starts telling suspected leakers entirely different things, to see what gets out.
Seedance 2.0 API launch postponed due to copyright threats from Disney/Warner
by Alisaqqt | 2026-02-20 16:25:49+00:00
Hearing the Seedance 2.0 API timeline is slipping: docs that were supposed to land Feb 22 and the API on Feb 24 are now delayed.

The stated reason is adding pre-release safeguards before public API access, after deepfake/copyright controversy around “real person reference” + low-effort prompts producing high-fidelity actor/celebrity lookalikes.

What they’re reportedly planning to ship before opening up includes:

stricter content filtering rules
explicitly blocking unlicensed real-person likeness video generation
compliance monitoring mechanisms (so commercialization doesn’t outpace legal/ethical boundaries)
No new ETA yet.

Source: Atlas Cloud (they’ve been in ongoing comms with the ByteDance team and have an API integration partnership in place). They also reached out to ByteDance to confirm the delay.
by foxyv | 2026-02-20 16:25:59+00:00
Those are fuel canisters for a white gas stove. Pretty common below freezing because standard butane ones don't work well in the cold without a special fuel mixture. Although they make stoves that you can turn the canister over and it heats the liquid to produce gas; the white gas ones are easier to find fuel for in weird places and will burn gasoline in an emergency.
by speak_plainly | 2026-02-20 16:26:06+00:00
Karl Popper's warnings are more relevant now than ever as we continuously trade one version of a top-down, engineered Kallipolis for another. Plato failed to institute his own utopian blueprint, and it should have died in Syracuse. Instead, we endured a thousand years of the Catholic Church's theological adaptation, and today we are accelerating toward a technocratic iteration – essentially operating on a secularized Catholic hangover.

The most dangerous element of this cycle is how casually contemporary politics has embraced the noble lie. It twists a classical philosophical concept into a cynical excuse for leaders to deceive the public for our own supposed good. Often sanitized in intro political science courses as a pragmatic reality of governing, in practice, it functions as a corrosive mechanism for elites to control narratives and dodge accountability.

It has never worked, and it never will.

I remember a philosophy professor telling me we're studying philosophia, not philaletheia, and that really struck me. Truth has not been the primary objective of this equation for over 3,000 years. We desperately need Popper's demand for an open, truth-seeking society to break us out of this historicist trap.
by hennell | 2026-02-20 16:26:35+00:00
Different type of creator, different type of bugs. I'd assume a human giving me a way to delete merged branches has probably had the same issue, solved the same problem and understands unspecified context around the problem (e.g protect local data). They probably run it themselves so bugs are most likely to occur in edge cases around none standard use as it works for them.

Ais are giving you what they get from common patterns, parsing documentation etc. Depending what you're asking this might be an entirely novel combination of commands never run before. And depending on the model/prompt it might solve in a way any human would balk at (push main to origin, delete .git, re-clone from origin. Merged local branches are gone!)

It's like the ai art issues - people struggle with relative proportions and tones and making it look real. Ai has no issues with tones, but will add extra fingers or arms etc that humans rarely struggle with. You have to look for different things, and Ai bugs are definitely more dangerous than (most) human bugs.

(Depends a little, it's pretty easy to tell if a human knows what they're talking about. There's for sure humans who could write super destructive code, but other elements usually make you suspicious and worried about the code before that)
by jajuuka | 2026-02-20 16:26:45+00:00
That's really the achilles heel of a checks and balances system. Should an ideology gain control of all of them then the system doesn't work and it immediately sinks into authoritarianism. The Supreme Court acting on this just unfortunately gives the illusion of things working when it's a game of blitzkrieg. Make an obvious illegal action and get as much done as possible then when you are eventually checked, move on to the next thing. Just keep pushing in different directions until you cover the board.
by gymbeaux | 2026-02-20 16:27:05+00:00
If there is a correlation to company size or company popularity (e.g., FAANG) I would have actually thought it would be large companies/FAANG are hiring the low-quality H-1Bs. I usually work at medium sized companies (50-200 engineers company-wide is my definition) where maybe 2-4% of the engineers are H-1B or green card. They've all been great. Even the one at Allstate (Allstate was also hugely reliant on India-based Infosys "developers" who I will yell from the mountaintops were straight garbage and very much net-negative).
by pseudalopex | 2026-02-20 16:27:16+00:00
> First, he published at least three hit pieces on the agent.

No.

> Second, he actually managed to get the agent shut down.

He asked crabby-rathbun's operator to stop its GitHub activity. This was so GitHub would not delete the account. This was to preserve records of what happened.[1] The operator could have chosen to continue running the agent more responsibly. And what was the proof the operator shut it down?

> the bot actually issued an apology for its behaviour.

This was meaningless. And the human issued not an apology for their behavior.

[1] https://github.com/crabby-rathbun/mjrathbun-website/issues/7...
by tucnak | 2026-02-20 16:27:24+00:00
Truth be told if you're a European business, U.S. cloud providers weren't a good deal for a long time. Not since the advent of NVMe's and cheap 100G NIC's, well, that's for sure. Let's have a look at AWS R8 class, which is their most recent native instance type with real, modern I/O. Now, these are ostensibly powered by AWS Nitro 6th-gen networking, which is a 600G NIC. However, if you fancy NVMe drives (R8gd) which you do normally, you won't be getting more than 50G full-duplex. If you want to hit 100G+, you will need R8gn instances which don't offer ANY storage. So if your idea of data engineering is not calling from the 90s, well, you're stuck between a rock and a hard place mate!

Good news is you can get PCIe 5.0 servers, I/O gear, and host it yourself for a mere fraction of semi-capable AWS bill.

Bad news it doesn't matter if you don't get enough uplink bandwidth, no control over the routing table in the core routing infrastructure leading up to your WAN, or actual routers capable of hardware-filtering 100 gigabits worth of line rate per link. And you will need all these things if you want to at least try and match what Cloudflare/Cloudfront is doing from routing standpoint. (It will be much harder though to match them from the CDN standpoint...) DDoS protection is overrated, but it's not for reasons people commonly think.
by coldpie | 2026-02-20 16:27:42+00:00
I 100% agree. I will never forgive Biden for not putting these traitors behind bars in his first 6 months. He failed at one of his most important sworn duties, protecting the US from its enemies.

But, sometimes a groundswell movement really can build momentum and drive the conversation regardless of what the leaders think about it. Write to your state & national representatives demanding that they publicly support prosecution for the incredible crimes we're seeing committed by this admin. Try to make it a policy platform for your state party. Maybe we can build enough support from the bottom up to get popular momentum behind it. Holding criminals accountable for their crimes is not really a controversial position, we have to demand that they actually do it.
by snozolli | 2026-02-20 16:28:20+00:00
As someone who came up using Borland's Turbo Pascal, Turbo C, and Turbo Vision (their OOP UI framework), it was called CUI (character-based user interface) to distinguish from GUI, which became relevant as Windows became dominant.

I never heard "TUI" until the last few years, but it may be due to my background being Microsoft-oriented.

One of the only references I can find is the PC Magazine encyclopedia: https://www.pcmag.com/encyclopedia/term/cui
by RetroTechie | 2026-02-20 16:28:23+00:00
Amazing value indeed!

That said: it's a bit sad there's so little (if anything) in the space between microcontrollers & feature-packed Linux capable SoC's.

I mean: these days a multi-core, 64 bit CPU & a few GB's of RAM seems to be the absolute minimum for smartphones, tablets etc, let alone desktop style work. But remember ~y2k masses of people were using single core, sub-1GHz CPU's with a few hundred MB RAM or less. And running full-featured GUI's, Quake1/2/3 & co, web surfing etc etc on that. GUI's have been done on sub-1MB RAM machines once.

Microcontrollers otoh seem to top out on ~512KB RAM. I for one would love a part with integrated:
# Multi-core, but 32 bit CPU. 8+ cores cost 'nothing' in this context.
# Say, 8 MB+ RAM (up to a couple hundred MB)
# Simple 2D graphics, maybe a blitter, some sound hw etc
# A few options for display output. Like, DisplayPort & VGA.

Read: relative low-complexity, but with the speed & power efficient integration of modern IC's. The RP2350pc goes in this direction, but just isn't (quite) there.