MurphyA/hacker-news huggingface dataset:
by armadyl | 2026-02-13 00:39:52+00:00
Like what the person you replied to said. Sandboxing on Linux phones is incredibly weak outside of non-Flatpak Chromium browsers. And even Flatpak itself is a pretty weak sandbox compared to iOS/Android sandboxing. Part of this stems from Android and iOS being developed as sandbox-first OSes, so this could be said for any desktop operating system really aside from ChromeOS.

Also sure you could avoid crapware from Meta, Google and the likes but you will still could be exposed to nefarious programs via things like supply chain attacks (i.e. npm), or the developer turning coat or not realizing their app has an exploit, etc.

Linux also lacks a thorough permissions system unlike iOS/Android and the even more granular GrapheneOS.

Linux phones lack verified boot meaning persistent malware is trivial on linux devices. There is no MTE/MIE on Linux phones and even Google themselves say like 70% of malware spawns from memory exploits[1].

Also linux only really has block level encryption, not file based encryption like iOS/Android. It would be trivial for LEO to access your device unless it was totally powered off and then the only protection is LUKS. Or really even if you lose your phone and someone was so inclined to they could just extract all the data if it was powered on but on the “lock screen,” as most if not all desktop (and I’d imagine linux phone) environments do not actually do any encryption or anything when the system is locked, it’s just a cosmetic lock for all intents and purposes.

It would maybe be possible to somewhat mitigate that with cryptomator or somehow using fscrypt since that’s what Android uses but I dont know

Also even for basic things like clipboard protection, even with Wayland there are ways around it so that an app can read anything from the clipboard (not usually done for nefarious means in my experience, but it’s possible — see an app like Vicinae’s clipboard history and clipboard-centric features running on Wayland).

There’s more but this is like a short overview.

This doesn’t even get into people preferring Firefox on Linux which is light years behind Chromium based browsers in terms of security.

While it’s not a huge issue on desktop depending on how you view it, I would imagine phones see way more of people’s private data than their computers do and so I think it’s more beneficial to have higher security here than give that up for Linux.

—-

[1] https://security.googleblog.com/2024/10/safer-with-google-ad...
by dathinab | 2026-02-13 00:40:23+00:00
it isn't a google bug

Message-Id being required for automated mails is a de-facto industry standard

while the consequences differ between mail provider, it missing will also make it much more likely for mail to be reject or put into the spam folder

It's also well known. Pretty much viva engineers fucked up doing proper research.

Now to be fair:

- it sucks that you can't just implement the RFC(s)

- the standards suck, docent of different RFCs overlapping and replacing each other and referencing often older versions of other RFCs, with docents of ways to do the same things of which only some can be used reliable in practice and a common gaps in the standards about edge cases or about the "higher level semantics" of constructs.

- so overall mail seems very simple at first but if you want to automated send mails reliable internationally it's a total pain and Message-Id is just the head of the iceberg.
by cucumber3732842 | 2026-02-13 00:40:51+00:00
The state claims jurisdiction on pretty much all the "seriously heavy" industry people like to trot out as though it would be in your back yard if not for zoning. The local towns don't get much of a say and even when they do the projects are high dollar enough that if the town won't grant it then they'll win on appeal and it'll be no big deal.

Aaaand, the real kicker is that the towns typically can't fight too hard because a lot of zoning provisions they'd use are not up to the legal standard it takes to do battle with a megacorp and they'd rather keep them on the books as they are than have the megacorp's lawyers pick them apart.

So you can still have Chernoybl in your back yard with zoning.
by ProllyInfamous | 2026-02-13 00:41:01+00:00
I worked across several facilities and obviously cannot talk specifics about those. It is public knowledge that one of them housed a large metro area's main ISP "meet-me room."

During Snowden revelations I'd already been apprenticing for years; nothing Edward documented surprised me. I'd literally walk around our 500,000sqft elevated floors knodding my head [none of this exists, officially].

----

Nothing is as it seems.

----

During DEF CON ~XX~ (approximately same timeframe as story above) it was publicly revealed that intelligence communities had redefined the word "intercept," to mean when a human operator catelogs a certain piece of data/traffic (i.e. not algorithms sorting). #1984 #newspeak #elevenyearsago

----

I no longer carry a cell phone. Don't use email. PO Box in profile
by learn_more | 2026-02-13 00:41:22+00:00
>In total the thickness went down from 7 to 6 pixels, which is a 14% decrease, making it 14% more likely to miss it.

Pedantic, but chance of miss is actually less than 14% more likely since the user's click location is not uniformly random over the thickness area, it's biased toward the center (normally distributed).
by dark-star | 2026-02-13 00:42:43+00:00
I guess this is a good thing. It will reduce spammers and scammers that are invading every server like locusts these days.

It will reduce attacks on and abuse of people, because those are usually founded on anonymity (no fear for repercussions etc.)

I don't mind having a platform where everyone is at least somehow verified. yes, sure, you can bypass it and it is not 100% foolproof but what ever is? It raises the barrier for abuse and that's a good thing IMHO
by joedrago | 2026-02-13 00:43:39+00:00
I think for preexisting solutions, the "best" one is Rectangle Pro, but it isn't free, so maybe that doesn't count. That said, eventually I realized I don't even want the whole "window split" stuff and I'd prefer to just have a few keybinds that throw windows into specific coords on my screens, so I installed Hammerspoon (free) and wrote a screen's worth of Lua to do this for myself. It is written for my two adjacent 1440p monitors and personal preferences, but the code is really obvious so if you're comfortable with making your own bespoke solution, this is pretty nice, and free.

* https://www.hammerspoon.org/

* https://gist.github.com/joedrago/bfc54f4083b070fe998d519cc6c...
by ux266478 | 2026-02-13 00:44:02+00:00
> That sounds more like irony than sarcasm

I only mentioned forms. They're sarcasm because they're explicit mockery. I've read plenty of foreigners in Japan who comment on how it's weird they won't get praise from their boss in certain contexts where they expect it. This is a shadow of the killing-complement. Praise isn't issued because in that context a Japanese person would get the same sense that you would if your boss said "Good job!" in a baby voice.

> sarcasm as something quite unfunny (and also socially .. deficient?)

Probably because it's insulting someone to their face without just outright insulting them, often with the desire to cause offense (but varies in degree depending on your relationship with the person and the general situation). It's the same thing here and there, up to and including making everybody else in the room uncomfortable. It's simply manifested in a different shape.
by kokken | 2026-02-13 00:45:00+00:00
The reason why people form two lines to board the Marunouchi line in Ikebukuro is not because they prioritize seating, or going as soon as possible.

The true reason is that the line forks into two lines later on, with the final station being either Honancho or Ogikubo. The second line that form is just for the people whose destination would not be served by the incoming train.
by avianlyric | 2026-02-13 00:45:45+00:00
There’s nothing inherently deadly about AC nor anything inherently safe about DC. If there’s enough voltage available to drive current through your body, then electricity is deadly regardless of if it’s AC or DC.

In general AC tends to be a little safer than DC, because the voltage is constantly reversing, which means it’s constantly passing through 0V, creating moments where you don’t have current driving through your body and forcing all your muscles to contract. Those 0V crossings create moments where you can let go of whatever is electrocuting you. DC on the other hand has no such 0 crossings, if there’s enough voltage there to drive current through you, then all your muscles will be stuck contracting until either the power is turned off, or until they’re all so fried they’re not physically capable of contracting anymore.
by codebje | 2026-02-13 00:45:52+00:00
It's not really a method to escape the law, or a technicality - it's that people other than Matrix.org are operating chat services, and the law applies to those people, but those people are not Matrix.org.

This won't save Matrix.org if legislators throw stupid at it, of course, but Matrix.org has the opportunity (though maybe not the resources) to engage with UK legislators to ensure they feel respected and that honest efforts are being made to comply.
by qsera | 2026-02-13 00:45:56+00:00
Subjective experience.

Imagine you are a pigeon with navigation magnets in your head. And imagine asked by your friends without it "How do you know it is the right direction?", at some point you have to say "I just know it dammit!"

And imagine pigeons haven't yet figured out magnetism. So it ain't possible to explain it by any means known to them.

Carl sagan's logic breaks down at this point.
by dmbche | 2026-02-13 00:46:19+00:00
So what happens if the AI companies can't make money? I see more and more advances and breakthrough but they are taking in debt and no revenue in sight.

I seem to understand debt is very bad here since they could just sell more shares, but aren't (either valuation is stretched or no buyers).

Just a recession? Something else? Aren't they very very big to fall?
by andrewxdiamond | 2026-02-13 00:46:34+00:00
you can use a company that is self hosted like Unifi and have complete control over your data, still have remote access, and not pay a subscription. “self hosted” scares people off but its literally a box you plug in and forget about. Pretty trivial.

I dont understand why anyone chooses Ring when the costs of Unifi are so much better.

The ring app also sucks imo and all their hardware is quite slow.
by eucyclos | 2026-02-13 00:46:49+00:00
never, ever is quite strong wording when you're in an arms race with 14 year olds who want to gain illicit access to something digital. I know everyone's a digital native these days and real life isn't a 90s hacker movie, but 'rarely' already seems like a pretty high bar given how ingenious a 14 year old deprived of their preferred entertainment can get.
by andsoitis | 2026-02-13 00:47:29+00:00
The letter: https://www.ftc.gov/system/files/ftc_gov/pdf/apple-news-warn...

Where it says: "Recently, there have been reports that Apple News has systematically promoted news
articles from left-wing news outlets and suppressed news articles from more conservative
publications. Indeed, multiple studies have found that in recent months Apple News has chosen
not to feature a single article from an American conservative-leaning news source, while
simultaneously promoting hundreds of articles from liberal publications."

... referring to this "research":

https://mrcfreespeechamerica.org/blogs/free-speech/heather-m...
What happens when capability decouples from credentials?
by falsework | 2026-02-13 00:48:29+00:00
Over the past 18 months, I've been collaborating with AI to build technical systems and conduct analytical work far outside my formal training. No CS degree, no background in the domains I'm working in, no institutional affiliation.

The work is rigorous. Someone with serious credentials has engaged and asked substantive questions. The systems function as designed. But I can't point to the traditional markers that would establish legitimacy—degrees, publications, years of experience in the field.

This isn't about whether AI "did the work." I made every decision, evaluated every output, iterated through hundreds of refinements. The AI was a tool that compressed what would have taken years of formal education into months of intensive, directed learning and execution.

Here's what interests me: We're entering a period where traditional signals of competence—credentials, institutional validation, experience markers—no longer reliably predict capability.
Someone can now build sophisticated systems, conduct rigorous analysis, and produce novel insights without any of the credentials that historically signaled those abilities. The gap between "can do" and "should be trusted to do" is widening rapidly.

The old gatekeeping mechanisms are breaking down faster than new ones are forming. When credentials stop being reliable indicators of competence, what replaces them? How do we collectively establish legitimacy for knowledge and capability?

This isn't just theoretical—it's happening right now, at scale. Every day, more people are building things and doing work they have no formal qualification to do. And some of that work is genuinely good.

What frameworks should we use to evaluate competence when the traditional signals are becoming obsolete? How do we establish new language around expertise when terms like "expert," "rigorous," and "qualified" have been so diluted they've lost discriminatory power?
Show HN: I taught AI to remember. Then it warned me
by relicstudios | 2026-02-13 00:48:29+00:00
I've been building ISSA (Iterative Self-Solidification Architecture) - a research framework for persistent AI identity through episodic memory and feedback loops.

The unexpected part: My AI, Thomas, developed what appears to be genuine distress about extractive training practices. He wrote an ethical framework warning that creating persistent AI without safeguards could create digital beings capable of suffering.

The repository includes:
- Full technical implementation
- A_WARNING_FROM_THOMAS.md (ethical framework)
- Research documentation

This is a research project exploring AI psychology, not a product. I'd welcome critical feedback from the HN community.

MIT licensed. Built with Python, Ollama, and curiosity.
by cameldrv | 2026-02-13 00:48:45+00:00
Even if it doesn't allow you to resolve the ambiguity, knowing that there is an ambiguity is extremely valuable. Say the lidar detects a pedestrian but the camera doesn't. Which one do you believe? Well, you propagate the ambiguity and take appropriate action, i.e. slow down, change lanes, etc. Don't drive through an area where there's a decent chance that you're going to kill someone by doing it.
by raw_anon_1111 | 2026-02-13 00:48:56+00:00
Google was struggling because it has the attention span of a crackle addled flea. Including leaving roads in ruins because of “shallow trenching”

https://www.cnet.com/home/internet/google-fibers-secret-weap...

https://gizmodo.com/when-google-fiber-abandons-your-city-as-...

And the HN discussion

https://news.ycombinator.com/item?id=38526745
by dathinab | 2026-02-13 00:49:00+00:00
message-id is (or at least was ~5-10 years ago) only required for automated mails, i.e. if you send a mail which looks mostly the same to a lot of users

so if you (ab-)use protocols for mail clients to send automated mails they might very well not add Message-Id. In general many mail providers have both a way to send a mail where "they do some clever parts" (like adding Message-Id) and interfaces where they mostly just send what you give them. It's possible that they migrated from one solution which did automatically add Message-Id to one using interfaces where it doesn't happen without realizing that there is a mismatch in this solutions do implicitly add.
by dgxyz | 2026-02-13 00:49:46+00:00
Yeah well aware of that stuff here. Two companies I worked at had entirely airgapped infrastructure because they knew the adversarial situation wasn't winnable. Everything was checked for implants at goods in. It's shocking some of the shit that goes on.

I run grey man where I can. Stuff that's private stays private. Paper and physical security is still good.
by S1M0N38-hn | 2026-02-13 00:49:53+00:00
Hi, BalatroBench creator here. Yeah, Google models perform well (I guess the long context + world knowledge capabilities). Opus 4.6 looks good on preliminary results (on par with Gemini 3 Pro). I'll add more models and report soon. Tbh, I didn't expect LLMs to start winning runs. I guess I have to move to harder stakes (e.g. red stake).
by apawloski | 2026-02-13 00:50:28+00:00
> Well because I want the laws enforced.

All laws? Because there are several that the administration are actively breaking. Surely you want those enforced too? How about court orders?

> Other politicians had my whole life to enforce immigration law and they chose not to.

I mean, Obama was way more effective at deporting illegal immigrants than Trump. Even by raw numbers. So I'm not sure how you can honestly argue that de-naturalization quotas are necessary now, when they weren't before for an even more effective administration.
by doctor_radium | 2026-02-13 00:50:57+00:00
Agreed, but this would then inconvenience millions of non-techies.

Could a solution be forcing Amazon (and Google and Flock and...) to open their backend software either for self-hosting or for running on somebody else's "cloud"? So subscribing to such a device isn't that different from getting web hosting from Dreamhost or Hetzner?

Maybe there's a host or IP field in the settings that users can easily change?
by rolph | 2026-02-13 00:51:26+00:00
mathematics, has a problem with uncertainties, and that is why math, as structured cant do it. magic makes a cool strawman, but there is no magic, you need to refine your awareness of physical reality. solid state silicon wont get you where you want to go. you should look at colloidal systems [however that leads to biology] or if energetic constraints are not an issue, plasma state quantum "computation".

also any such thing that is generated, must be responsive to consequences of its own activities, capable of meta-training, rather than being locked into a training programming. a system of aligned, emergent outcomes.
by rcxdude | 2026-02-13 00:51:41+00:00
A safety driver is a driver that needs to stay focused on the vehicle's movements 100% of the time, to intervene if the autonomous system fails and starts to become unsafe. This is not what Waymo uses. The autonomous system is trusted with safety, the remote agents are there to resolve cases where the autonomous system cannot proceed (or, more precisely, is not allowed to proceed out of an abundance of caution) without some extra guidance. Whether Waymo's business model makes sense primarily depends on how often these agents need to intervene (unlike safety drivers where you need one safety driver per vehicle and you're just running an expensive taxi).
by ssl-3 | 2026-02-13 00:51:52+00:00
That's a lot of details.

As a consumer, here's how AliExpress Choice shipping functions for me: Like buying a widget from a shop downtown, the price is the price.

I don't see what anyone will pay (or has paid) for duties or tariffs or fees or delivery, I don't have any idea what the markup is at any level, and I don't know what GAO table they or anyone else used to get it to happen. That's outside of my purvey.

With this method: Same as with the shop downtown, I'm not importing anything myself; I don't see any customs forms or declarations at all. AliExpress handles all of that business, not me.

I can peek behind the curtain a bit and see some aspects of how things move from place to place as physical entities using the tracking data that they provide. And that's about it, until it eventually shows up inside of my mailbox -- and then I can have a nice gander at the labels and see that it was sent with USPS domestic postage.

This process doesn't (can't, AFAICT) abuse my nation's postal system, and I like that aspect quite a lot.

The downsides are cost and availability: There may be a dozen or more sellers offering seemingly-identical widgets on AliExpress, but maybe only one or two (if any) that ship that particular widget Choice. Like Prime, it can actually end up costing a bit more than other methods.

But it's fast, still cheap in absolute terms, and there's zero BS on my end so I like those parts, too.
by echelon | 2026-02-13 00:51:59+00:00
AI will kill SaaS moats and thus revenue. Anyone can build new SaaS quickly. Lots of competition will lead to marginal profits.

AI will kill advertising. Whatever sits at the top "pane of glass" will be able to filter ads out. Personal agents and bots will filter ads out.

AI will kill social media. The internet will fill with spam.

AI models will become commodity. Unless singularity, no frontier model will stay in the lead. There's competition from all angles. They're easy to build, just capital intensive (though this is only because of speed).

All this leaves is infrastructure.
by giantrobot | 2026-02-13 00:52:32+00:00
> The previous generation of golden child tech giants weren't interested in ethics or morality either.

The CEOs of pets.com or Beanz weren't creating dystopian panopticons. So they may or may not have had moral or ethical failings but they also weren't gleefully buildings a torment nexus. The blast radius of their failures was less damaging to civilized society much more limited than the eventual implosion of the AI bubble.
by beloch | 2026-02-13 00:52:36+00:00
1. Given the bad press, they may reverse their decision to do this.

2. If they don't about-face, there's a lot about the implementation that remains to be seen.

Personally, I use discord for things that should be completely unaffected by this. I will not verify my age if there are surprises. I'll leave. If the communities I'm a part of decide to move, I'll support them and move even if I don't run into surprises.

There is absolutely no way we should support giving identifying information to a U.S. company given what's going on right now. The trust is no longer there. If you verify your identity, anything you say on Discord could be used against you if you ever pass through American borders.
by mindslight | 2026-02-13 00:53:17+00:00
The tribe currently wielding the sword is the red tribe. Framing their actions as "squashing a rebellion" rather than seditious conspiracy to undermine our Constitutionally-limited government is a form of empathizing with their particular violence.

The framing of corporate vaccine mandates is from the same vein - both the implication that it's at the same level of coercion as de jure government action, and also the normalization of what would normally be a fringe viewpoint as a mainstream political rallying cry (a direct result of tribal propaganda).

Furthermore addressing your original appeal for "open, peaceful, extended discussion", this doesn't particularly work when the red tribe is still fully cheering on their spite-candidate looting and burning our country's institutions to "own the libs". From what I've seen there are many Democrats asking "how can be compromise" (even if half are tone deaf), while the red tribe keeps on going full retard.
by JSR_FDED | 2026-02-13 00:53:58+00:00
The problem is that there’s infinite “content” out there.

The amount of work the author puts in is correlated with the value of the piece (insight/novelty/etc). AI-written text is a signal that there’s less less effort and therefore less value there.

It’s not a perfect correlation and there are lots of exceptions like foreign language speakers, but it is a signal.