MurphyA/hacker-news huggingface dataset:
by clipsy | 2026-02-02 04:05:44+00:00
It's not "cannot" but "will not", and the flaw is not with the American political system but with the GOP and the American populace. Congress could absolutely rein this in at any time if Republicans in Congress cared to do so; the Supreme Court could rein this in at any time if the Republicans on the Supreme Court cared to do so. Do not let yourself be convinced that the problem is Trump or a too-powerful executive; the problem is an entire party and the people who cheerfully vote for it.
by devkit1 | 2026-02-02 04:06:02+00:00
I am an American and I make a very conscious effort to appreciate social and political nuances. And I go out of my way to point out nuances to others who, in my opinion, oversimplify their statements. It could be argued that the expression of stereotyping Americans as lacking nuance, itself lacks nuance. I believe really most people are similar in that we have our biases, differences in context and experiences. We can all try our best to be as nuanced as possible.
by maxkfranz | 2026-02-02 04:06:08+00:00
Everyone is entitled to their opinions.

My opinion is that open source documentation is like polite dinner conversation: It’s not the proper place to discuss politics.

If an author wishes to use their open source project as a platform to discuss politics, that’s the author’s prerogative. But then, as perhaps in this instance, it could be to the detriment of the project itself.
by freitasm | 2026-02-02 04:06:11+00:00
The writeup says it right there:

"The security exper’s analysis indicates the attack ceased on November 10, 2025, while the hosting provider’s statement shows potential attacker access until December 2, 2025. Based on both assessment, I estimate the overall compromise period spanned from June through December 2, 2025, when all attacker access was definitively terminated."
by truekonrads | 2026-02-02 04:06:17+00:00
The problem seems the sales model rather than the dongle:

1) a hardware and software solution implies that hardware will stop working at some point. Customers should understand it
2) you could sell them a new dongle every time support contract ends which is what I’ve experienced with Xways as an example. Even if you’re air gapped once a year usage data upload and new dongle seems fine.
3) why should users receive free upgrades and bug fixes? No software is bug free.

Finally there are several brand protection shops that fight fakes and work well with Shopee, Lazada, Facebook etc. It’s not five dollars but they will take these down effectively
by rendaw | 2026-02-02 04:06:58+00:00
IANAL but I think you'd be fine as long as you placed your NUC on a Mac Mini or maybe a closed Macbook if your hardware has a larger footprint.

> use and run one (1) copy of the Apple Software on a single Apple-branded computer at any one time.

Note that you do have to be careful not to stack multiple Macbooks when you do this.
Show HN: Claw-daw – offline, deterministic terminal-first DAW
by soyadiaoune | 2026-02-02 04:06:58+00:00
I built claw-daw: a tiny MIDI DAW you can drive from the terminal (TUI + headless scripts).

Motivation: I wanted “music making that feels like coding” — reproducible, diffable, and automation-friendly.
Same script + same seed → same beat.

Features:

• offline (FluidSynth + SoundFont) + ffmpeg export
• deterministic renders for iteration/agent pipelines
• WAV/MP3/MIDI export
• projects are JSON (Git-friendly)
Would love feedback on the workflow + what features would make this actually useful for you.
by recursivedoubts | 2026-02-02 04:07:08+00:00
i would absolutely love to do individual interviews, but I have three classes of 50-80 students each and, at 10 minutes per interview, that would be ~35 hours worth of interviewing and there just isn't time to do that given the schedules of the students, etc.

my feedback has been pretty good on the in-person quizzes, we just had our first set
by sparkie | 2026-02-02 04:07:26+00:00
Cryptography would be one application. Many crypto libraries use an arbitrary size `bigint` type, but the ciphers typically use modular arithmetic on some fixed width types (128-bit, 256-bit, 512-bit, or some in-between like 384-bits).

They're typically implemented with arrays of 64-bit or 32-bit unsigned integers, but if 128-bits were available in hardware, we could get a performance boost. Any arbitrary precision integer library would benefit from 128-bit hardware integers.
by lvturner | 2026-02-02 04:07:31+00:00
You make a lot of very strange assumptions about who I am and what I've done with my life.

And you'll note, I don't stop them, nor complain - I merely WISH they were a little more considerate in their partaking of the herb, I'd be less irritated.

Additionally, they don't have "every right" it's entirely illegal here, but I've no interest in calling the police over it - as again, I just wish they were naturally a little more considerate over their use of shared space than having a desire to punish them over it.
by glenstein | 2026-02-02 04:07:46+00:00
Love the concept. Wikitok also exists [1] but the recommendation aspect that you're bringing you the table is a very intriguing original spin on it. I would be fascinated to see what a smart algorithm could discover on my behalf on Wikipedia given enough time.

I think it would be nice if you could do a non simple English version but nevertheless happy with what you've put together, and I've added a shortcut to my phone. Please don't let the negativity stop you from continuing to work on it.

1. https://www.wikitok.io/
by jodrellblank | 2026-02-02 04:07:56+00:00
"Visual J++ is Microsoft's discontinued implementation of Java" - https://en.wikipedia.org/wiki/Visual_J%2B%2B

"J# does not compile Java-language source code to Java bytecode .. does not support Java applet development or the ability to host applets directly in a web browser" - https://en.wikipedia.org/wiki/Visual_J_Sharp
by davorak | 2026-02-02 04:08:27+00:00
They were able to replace the downloaded executable with their own version. From the article:

> 2. Even though the bad actors have lost access to the server from the 2nd of September, 2025, they maintained the credentials of our internal services existing on that server until the 2nd of December, which could have allowed the malicious actors to redirect some of the traffic going to https://notepad-plus-plus.org/getDownloadUrl.php to their own servers and return the updates download URL with compromised updates.
by opan | 2026-02-02 04:09:19+00:00
Ah, I believe Greenclip has that feature.

Personally I hate when people copy/paste images as it often results in bad filenames like "image.jpg" (as in literally the word image) and then requires me to rename them when saving them when the file probably had a perfectly good default filename. I make sure to save images and reupload them, and I have a one-liner to check my pictures dir for bad filenames in case I saved one without noticing (worst case I run my routine rsync and am repeatedly replacing some image.jpg with a different picture). I also made a short script to put the current unix time on my clipboard in case I need to rename some of these bad files in a pinch. I tend to think less of people contributing to this bad filename problem, although chat programs and such could likely detect and "fix" it on their end also.

My screenshot workflow saves an image with the dimensions and date/time in it to my ~/scrot directory and then I can quickly post it somewhere by just sorting that dir by mtime with newest files on top.
by ameliaquining | 2026-02-02 04:09:41+00:00
Scrabble is a competitive game, not a puzzle, and therefore subject to a different set of constraints. (Players in a competitive game are trying to win; a puzzle author, if they're any good at their job, is ultimately trying to lose.)

In particular, you have to consider the equilibrium. If you only allow a subset of words in Scrabble, this replaces the competitive advantage from knowing lots of words that no one uses in real life, with a competitive advantage from knowing the exact contours of the border between acceptable and unacceptable words. I would argue that this is even worse; at least if you learn lots of Scrabble words you're learning something about the real world.

By contrast, Wordle can self-impose whatever constraints they want on solutions, and people don't have to know what those constraints are in order to solve the puzzle. (It can help a little on the margin, which in a perfect world would not be the case, but it's much less of a problem for the puzzle-solving experience than the Scrabble equivalent would be.)
by recursivedoubts | 2026-02-02 04:09:42+00:00
The quizzes are still somewhat difficult (and fairly frequent) so you have to still get your stuff done (and more consistently than the cramming encouraged by a big midterm/final)

I do spaced repetition in lectures, my homeworks are typically programming problems and, as I said in OP, rely on the student committing to doing them w/o AI. So spaced repetition of the most important topics on quizzes seems reasonable. (It's an experiment this semester)
by kcplate | 2026-02-02 04:11:04+00:00
I can tell you that piracy in the corporate world was RAMPANT in the ‘90s. I made a nice sum of money back in the day as a freelance auditor for companies trying to get their legal ducks in a row. Productivity software like Lotus, WordPerfect, Word, Excel were just mass installed off one license because there was no product activation keys or any sort of license validation methods.

Dongles were pretty commonplace on your more expensive software products from mid 90s through the early 00s. If I was publishing software that was a >$1000 a license, I damn sure would have used them.
by lazide | 2026-02-02 04:11:19+00:00
The model you are referring to works fine when the industry is expanding and/or legal entities turn over eventually.

Which is not uncommon.

It’s also one that is typically pretty good for customers that like to do an investment and then continue to reap benefits from it. The capitalization model.

The ‘lease’ model (SaaS) is good for customers with highly variable licensing/software needs or that expect extremely high turnover, and prefer to see these costs as, essentially ‘cost of production’. The cash flow model. It does require a lot of trust, however, that when the lease comes up for renewal the fees won’t be usurious.

Neither is necessarily wrong. A whole lot of folks are starting to realize the downsides of expenses coming out of cashflow though! And losing a lot of trust.
by SilverElfin | 2026-02-02 04:11:23+00:00
I agree that Luckey is effectively saving taxpayers hundreds of billions given how slow and expensive and uncompetitive the old defense companies have been. But I am very uncomfortable with the strong ties between this new wave of tech companies and the Trump administration, with all the usual investors and middlemen like Andreesen, Thiel, Joe Lonsdale, etc, who I find hard to trust. For example, Joe Lonsdale is literally pumping the Melania documentary:

https://xcancel.com/JTLonsdale/status/2017844903099732184

It’s also disturbing to see Luckey admit he is a propagandist who will twist the truth and manipulate people to get his way.

> With Silicon Valley elites going MAGA post—last year's election, Luckey is taking a Trump-stanning victory lap. After all, he was "one of the true Trump OGs," he told Rogan. When Luckey was 15, he wrote Trump a letter asking him to run for president: "I loved his extremist rhetoric going back to 2009!" Trump seems to stan Luckey, too: At a press conference in the spring, the president archly called Anduril's Roadrunner drone a "nasty looking thing."
by recursivedoubts | 2026-02-02 04:11:32+00:00
If a student uses AI to simply code-gen without understanding the code (e.g. in my compilers class if they just generate the recursive-descent parser w/Claude, fixing all the tests) then they are robbing themselves of the opportunity to learn how to code.

In OP I showed an AGENTS.md file I give my students. I think this is using AI in a manner productive for intellectual development.
by viraptor | 2026-02-02 04:11:39+00:00
> and still have the good sense to

The good sense is your judgement. At some point a real, direct, disruptive protest is going to be the right solution for a big enough group of people. Peaceful protests are just a "we're starting to get there" signal. It's not like politicians normally say "gee, lots of people don't like how I abuse power, I guess I'll stop now". It's all about being collectively upset enough about status quo.
by simojo | 2026-02-02 04:11:48+00:00
This is orders of magnitude more complicated and risk prone than wire wrapping due to the possibility of cold joints, but as I understand it, this look is what people dig these days (just watch any EE youtuber). I too used to think that soldering on porto board was a great way to go about prototyping sans SBB, but you can't ignore the bomber connections that wire wrapping gives you.
by singingbard | 2026-02-02 04:12:27+00:00
I did a fair about of data analysis and deciding when or if my report was correct was a huge adrenaline rush.

A huge test for me was to have people review my analyses and poke holes. You feel good when your last 50 reports didn’t have a single thing anyone could point out.

I’ve been seeing a lot of people try to build analyses with AI who haven’t been burned with the
“just because it sounds correct doesn’t mean it’s right” dilemma who haven’t realized what it takes before you can stamp your name on an analysis.
by burnt-resistor | 2026-02-02 04:13:47+00:00
The whole approach of virus scanning is reactive and incomplete. This is because, except for some uncertain guesswork using "heuristics", it depends upon vendor analysis of submitted malware infection samples after it's already happened to determine specific malware file/process signatures. This doesn't and cannot catch all possible malware that has ever happened, especially if it's new, not widespread, or evaded analysis from ever being noticed. Thus, a fraction of malware will always slip and will always remain undetectable.

After a machine is compromised by malware, there's rarely-to-never a trustworthy way to ever fix it with 100% certainty. And especially worrisome is "repair" from the host itself which maybe infected with a rootkit that hides and repairs the malware. Thus, the only correct solution is to completely reimage/reinstall from trusted sources. Deviate from this path at one's own extreme cost/risk.

There also exist a tiny amount of even worse, specialized malware, usually deployed by state actors, that infect hardware in such a way that makes them difficult and sometimes uneconomical to repair.

PSA: Never run untrustworthy shit on any machine that matters. This also includes FOSS projects that don't have their shit together.
by mindslight | 2026-02-02 04:14:34+00:00
> The agent stated that I was impeding their work

Note how these thugs just casually lie to create some fantasy narrative that runs completely counter to the ideas of the Constitution, an open society, and government responsible to The People. When the fascist talking heads get on TV and claim that agents had no choice but to execute another American because they were being "impeded", everyone would do well to remember how readily their whole organization characterizes passive and peaceful democratic activity as "impeding".
by QuiEgo | 2026-02-02 04:14:37+00:00
Having the privilege to live in a house without common walls to a neighbor is the biggest quality of life improvement I've ever had the good fortune to experience.

I'd take a hell of a long commute to the burbs' before I'd go back to dealing with b.s. like this.

Loud music, slashed tires if you called the cops, people smoking weed and cigars and stinking up the whole building, parking space shortages, drunks throwing up in the stiarwells, screaming matches between people in bad relationships, horribly maintained flats and every repair done on the cheap, 4am fire alarms, a rat problem the owners would not put money in to fix properly, the list goes on and on over the 20+ years I lived in rentals.
by ChrisArchitect | 2026-02-02 04:14:40+00:00
Of course the sentiment is there as with any of these kind of posts but a bit revisionist. News, media, personal websites sure, but forums? not so much. Of course usenet and mailing lists and chat rooms but not forums so much. Everything was disjointed and revolved around loosely connected website rings etc. Which brings me to another part - the thing about knowing stuff about people. Reduce that to just knowing people in general. It was double-edged sword. You could connect if you were savvy enough over email with like minded, but if that connection went away for whatever reason, there wasn't like a backup default trail like we have now with Facebook and other general profiles we all see to have. People would disappear with no way to connect to them. Not the best when you look back at it from what we have now and kind of wish some of those connections weren't just 'lost'.
by its_ubuntu | 2026-02-02 04:15:34+00:00
I recommend staying far away from x11libre. It's a red herring and nothing good will come out of that project. RedHat/Microsoft (but I repeat myself) is behind it. Study the drama that went on surrounding its launch. All that was meant to give the project street cred, like they're the rebel forces working against Big Brother. Nope, there's red flags all over that situation. Classic example of Controlled Opposition.

The nature of computer security is there simply isn't any, at all, at this point in time. The world's computer systems are extremely vulnerable in just about every way, on every level from the mystery-ware running inside the CPU on up. All of the CPUs and/or firmware likely have backdoors, and entire classes of exploits that haven't even been revealed yet. The software is full of bugs and vulnerabilities. It's dire.
by Lammy | 2026-02-02 04:16:11+00:00
Vindicated once again for turning off any update checks the moment I install any new piece of software.

Even if this sort of (obviously rare) attack is not a concern, it baffles me how few otherwise-intelligent people fail to see the way these updaters provide the network (which itself is always listening, see Room 641A and friends) with a fingerprint of your specific computer and a way to track its physical location based on the set of software you have installed, all of which want to check for updates every goddamn day.
by gsf_emergency_6 | 2026-02-02 04:16:19+00:00
<formal-vibing | vibe-formalizing>

It looks like you concluded they were being confrontational when they were only being expressive? Whereas the rest of the audience thought the movie was only being expressive? To what extent did that expose your erstwhile localization (to FR) while the old country had shifted in place? Do I miss anything else?

</formal-vibing | vibe-formalizing>

Meme merge

https://youtube.com/shorts/o-ZSHFeo5H4
by Retric | 2026-02-02 04:17:13+00:00
A stockpile of 10 years of food isn’t the same thing as 10 years of the modern American diet. Don’t expect veal from a government warehouse.

That said, we can preserve viable sperm for 50+ years. https://www.techexplorist.com/worlds-oldest-semen-still-viab...

Maintaining nutritional content isn’t a major hurdle.
by edb_123 | 2026-02-02 04:18:23+00:00
So, let me get this straight. If I've been lazy, postponed updates and I'm still on 8.5.8 (Oct 2023) - it turns out I'm actually...safer?

Anyway, I hope the author can be a bit more specific about what actually has happened to those unlucky enough to have received these malicious updates. And perhaps a tool to e.g. do a checksum of all Notepad++ files, and compare them to the ones of a verified clean install of the user's installed version, would be a start? Though I would assume these malicious updates would be clever enough to rather have dropped and executed additional files, rather than doing something with the Notepad++ binaries themselves.

And I agree with another comment here. With all those spelling mistakes that notification kind of reads like it could have been written by a state-sponsored actor. Not to be (too) paranoid here, but can we be sure that this is the actual author, and that the new version isn't the malicious one?
by shiroiuma | 2026-02-02 04:19:14+00:00
Not really. They back it up with "good enough tech" that looks pretty and sucks people in with marketing, and then locks them into a closed ecosystem. Admittedly, some of their tech is actually very good (e.g. M-series ARM-based CPUs), but much of it is nothing special, or worse, just copying something else that competitors have been doing for years, presenting it as brand-new, and claiming credit for it.

They did this with the always-on screens for phones. My LGs had this many, many years ago. It was so bad that when Apple finally brought it out and acted like they had invented it, coworkers saw my LG and asked if I had gotten the latest iPhone, and I had to point out that it was a 5-year-old LG.

And then there's other stuff that Apple has which is just plain bad, but they present as new and wonderful, such as the "island" keyboard.
by ChrisArchitect | 2026-02-02 04:20:19+00:00
Some previous discussions:

2023 https://news.ycombinator.com/item?id=37646964

"Secure" 2024 https://news.ycombinator.com/item?id=42155457

"Ian" 2021 https://news.ycombinator.com/item?id=27728002

"Granny" 2021 https://news.ycombinator.com/item?id=26867300

"CIA" 2020 https://news.ycombinator.com/item?id=24091391
by mancerayder | 2026-02-02 04:20:45+00:00
>It is weird, because this is my reaction to the situation, so I'm responsible for it. A city is not a quiet space, and we can't really expect it to be. But at the same time, the lack of consideration for others is shocking. Walking around playing music on speaker is basically saying to everyone "f*ck you, I'm more important than all of you".

It's the subway/train/restaurant usage of phones to spool Tiktok/IG shorts with the sound on, and other noise, that I find maddeningly annoying.

But everything (in the US at least) is very loud, including restaurants. I don't understand why. It's far less likely to happen in W European capitals. As if Americans are extremely loud and love to be engulfed in constant noise. At least, the US and I'd say much of the Caribbean is like this as well.

Is it because we're old that we're bothered? Have things gotten worse? Did we or It change?
by arcfour | 2026-02-02 04:20:48+00:00
If the people with access to Room 641A want you, you're toast unless you're ready to make some REALLY big digital lifestyle changes that most people would not be amenable to, because you would have to be extremely paranoid on multiple fronts all the time. That kind of heightened vigilance is exhausting and really not worth it.

Threat modeling: it keeps things realistic.
by stego-tech | 2026-02-02 04:21:12+00:00
Enterprise IT dinosaur here, seconding this perspective and the author’s.

When I needed to bash out a quick Hashicorp Packer buildfile without prior experience beyond a bit of Vault and Terraform, local AI was a godsend at getting me 80% of the way there in seconds. I could read it, edit it, test it, and move much faster than Packer’s own thin “getting started” guide offered. The net result was zero prior knowledge to a hardened OS image and repeatable pipeline in under a week.

On the flip side, asking a chatbot about my GPOs? Or trusting it to change network firewalls and segmentation rules? Letting it run wild in the existing house of cards at the core of most enterprises? Absolutely hell no the fuck not. The longer something exists, the more likely a chatbot is to fuck it up by simple virtue of how they’re trained (pattern matching and prediction) versus how infrastructure ages (the older it is or the more often it changes, the less likely it is to be predictable), and I don’t see that changing with LLMs.

LLMs really are a game changer for my personal sales pitch of being a single dinosaur army for IT in small to medium-sized enterprises.