MurphyA/hacker-news huggingface dataset:
by ggm | 2026-03-05 22:38:20+00:00
I'm not seeking to criticise this product, I think this is a great development.

But, for almost all people this is shifting from one kind of "trust me bro" to .. another. We're not going to be able to formally prove the chip conforms to some (verilog?) model, has no backdoors, side channels, you-name-it. We're in the same place we were, with the same questions. Why do we trust this and the downstream developments? Because we do.

I know people who worked on cryptech, and I definitely had trust in their work, personal commitment to what they did, but that's "who you know" trust. The non transitive quality of this kind of trust is huge.

To be more critical my primary concern will be how deployment of this hardware is joined by significantly less benign design choices like locked bootloaders, removal of sideloads. To be very clear that's a quite distinct design choice, but I would expect to see it come along for the ride.

To be less critical, will this also now mean we get good persisting on device credentials and so can do things like X.509 certs for MAC addresses and have device assurance on the wire? Knowing you are talking to the chipset which signed the certificate request you asserted to before shipping is useful.
by Jtsummers | 2026-03-05 22:39:10+00:00
> Anthropic can now no longer buy new hardware and probably will be kicked out of all cloud compute.

That's beyond the authority of the DOD. What the DOD can do is say that Anthropic's products cannot be used on defense contracts. So Boeing programmers can't use Claude on a defense contract, but they can still use it on a civilian contract. Similarly, AWS or Azure can still be used by Anthropic, but they cannot use Anthropic in their defense work.
by yodsanklai | 2026-03-05 22:39:26+00:00
Not so much, and I really don't know if it's me getting older, or the workplace that has changed. When I was younger, I really wanted to learn and I had a romantic view of coding and computers.

Nowadays, I'm mostly concerned about my next evaluation cycle, and whether my job will still exist in 1-2 years. Also, piloting AI to produce slop is really not fun, and fighting fire even less.
by 3PS | 2026-03-05 22:39:43+00:00
Duolingo | Full-time | Multiple roles | $177K-$240K for NY roles | NY and London | Hybrid

Our mission is to develop the best education in the world and make it universally accessible. Our culture is eng-driven, friendly, and very data-driven thanks to our large userbase. Check out our blog to see what engineering at Duolingo can look like: https://blog.duolingo.com/hub/engineering/

Tech stack: (frontends) Swift/Kotlin/TypeScript, (backend) Python/Kotlin/Postgres/Dynamo, (infra) AWS/k8s/Terraform.

We're always hiring for engineers. A few roles below:

Senior Engineering Manager, Chess (NY)
https://careers.duolingo.com/jobs/8385137002

Senior Android Engineer (NY)
https://careers.duolingo.com/jobs/8217266002

Senior iOS Software Engineer (NY)
https://careers.duolingo.com/jobs/8318257002

Engineering Director (London)
https://careers.duolingo.com/jobs/8444624002

Senior Gameplay Programmer (London)
https://careers.duolingo.com/jobs/8424809002

Base salary: $177-240K for the NY-based roles, unsure about the London-based roles.

Perks: free lunch, 2-week winter break + 20 days of flexible time off.
by hinkley | 2026-03-05 22:39:58+00:00
It was intended to solve the problem of interactive coding sessions such as with Language Servers, which GCC utterly fails at (because what we think of as modern IDEs did not exist in 1990).

An awful lot of people have tried to use it as a JIT now and had to backpedal. I'm not sure how the one lead to the other but here we are.
by nobody9999 | 2026-03-05 22:40:28+00:00
>This is a known dark pattern called "price anchoring friction."

It is and it really sucks.

>By hiding the price until cart, Amazon forces comparison shopping to happen inside their ecosystem rather than on Google.

If that's what they actually did all the time, you'd be right. However, pretty much all the time (except in the past few hours), Amazon does not do that.

All you need to do to confirm that is a web search. What's more, if that were the case, sites like CamelCamelCamel[0] couldn't exist. Yet they do.

The discussion here was about issues that Amazon was having over the past four hours or so.

Amazon is and does objectionable things all the time. If you wish to dump on Amazon, more power to you.

But if you're going to do so, why not do it based on actual issues and not ones you made up based on what appears to be a back end outage (which seems to be resolved now, with prices, as is normal, prominently displayed on product pages ) at Amazon over the past few hours?

[0] https://camelcamelcamel.com/
by jackfranklyn | 2026-03-05 22:40:34+00:00
The hardest part of building software isn't adding features, it's having the discipline to leave something alone when it works. There's a real gravitational pull toward "just one more thing" because every feature request feels like a missed opportunity.

But I've noticed the products I actually keep coming back to are the ones that feel opinionated. They decided what they were and stuck with it. The ones that try to be everything usually end up being mediocre at all of it.

The WoW comparison in this thread is apt. The early expansions had clear identities. The later ones kept bolting on systems until playing felt like managing a spreadsheet.
by phil21 | 2026-03-05 22:40:49+00:00
So where are all these speculators storing DDR5, flash, and even spinning hard disks? Asking for a friend.

As a small buyer of all of those things supply at nearly any price has gotten very difficult to reliably predict week to week. When a lot of 100 64GB DDR5 sticks shows up available at a vendor, it’s at a take it or leave it price good for a couple hours. If I don’t pull the trigger they have another buyer for it and I might be waiting another month before anything becomes available again. We can no longer JIT for even failure replacement on our edge nodes.

Then you have the NVMe and even SATA SSD shortages. Still a bunch of very useful hardware out there I would love to find a decent deal on 8TB sata so I could repurpose it. Just doesn’t make any sense right now at current pricing and availability. Good luck trying to even find a batch of 12 of these disks at a time.

This goes for both enterprise and even prosumer I was willing to take for some of these uses.
by acheong08 | 2026-03-05 22:40:49+00:00
Not quite sure which channels I should reach out via but I've put my email on the page so they can contact me.

Based on timings, it seems that Wikipedia wasn't really at risk from the domain being bought as everything was resolved before NS records could propagate. I got 1 hit from the URL which would've loaded up the script and nothing since.
by crote | 2026-03-05 22:41:11+00:00
GHA in general just isn't designed to be secure. Instead of providing solid CI/CD primitives they have normalized letting CI run arbitrary unvetted 3rd-party code - and by nature of it being CD giving it privileged access keys.

It is genuinely a wonder that we haven't seen massive supply-chain compromises yet. Imagine what kind of horror you could do by compromising "actions/cache" and using CD credentials to pivot to everyone's AWS / GCP / Azure environments!
by tadfisher | 2026-03-05 22:41:56+00:00
Artists want to create. They do not want to tweak prompts and click "Generate" repeatedly until the output matches their vision. I would find this maddening.

But this wouldn't make sense anyway. Game companies won't foot the bill for real-time renders of your character, let alone a world of generated NPCs. If/when costs are low enough, and players accept a recurring subscription to play games, then this could happen, sure. No way in hell will artists be available in real-time to keep the generated imagery consistent.
by lapcat | 2026-03-05 22:45:05+00:00
> Methinks our current path has been determined since ~1980, with ~2000 probably being the last chance we had to stay under 1.5C.

That's why I said "I realized this back in the 1990s" and was later complaining about Al Gore.

> Otherwise I wouldn't get out of bed in the morning. Is that reasonable?

This is not like nuclear war—which could still happen, because we still have the weapons, and the madmen to use them—where we're all going to die tomorrow. We're already seeing the effects—as the submitted article shows—but the worst is yet to come. We're cursing our descendants with a world much more hostile than the one we were born into, for no other reason than greed and selfishness. It's the ultimate betrayal of the future. (By the way, I'm a human and deliberately chose to use em dashes, because I felt like it.)

The best thing to happen for global warming in recent years was not the Biden administration but actually the pandemic, because it significantly cut industrial output for an extended time.
by canpan | 2026-03-05 22:45:19+00:00
Maybe the phone market is still in its golden age? It's a wonder you can get the best phone in the world for only a little over $1000. And everyone can buy it. Online without a line.

Comparing with luxury watches which cost a magnitude or two more and are beaten in precision by a $10 casio.

I guess the thing to watch out is technical stagnation and "good enough"?
by hinkley | 2026-03-05 22:45:31+00:00
However if the third chip on your memory stick is properly broken, then the third bit out of every word of memory may get stuck high or low, and then the whole chip is absolutely worthless.

The most expensive memory failure I had was of this sort, and frustratingly came from accidentally unplugging the wrong computer.

After this I did buy some used memory from a recycling center that had the sorts of problems you described and was able to employ them by masking off the bad regions.
by withinboredom | 2026-03-05 22:45:52+00:00
Once you get big enough… there comes a point where you need to run some code and learn what happens when 100 million people hitting it at once looks like. At that scale, “1 in a million class bugs/race conditions” literally happen every day. You can’t do that on every PR, so you ship it and prepare to roll back if anything even starts to look fishy. Maybe even just roll it out gradually.

At least, that’s how it worked at literally every big company I worked at so far. The only reason to hold it back is during testing/review. Once enough humans look at it, you release and watch metrics like a hawk.

And yeah, many features were released this way, often gated behind feature flags to control roll out. When I refactored our email system that sent over a billion notifications a month, it was nerve wracking. You can’t unsend an email and it would likely be hundreds of millions sent before we noticed a problem at scale.
by Analemma_ | 2026-03-05 22:46:10+00:00
There's a famous Raymond Chen post about how a non-trivial percentage of the blue screen of death reports they were getting appeared to be caused by overclocking, sometimes from users who didn't realize they had been ripped off by the person who sold them the computer: https://devblogs.microsoft.com/oldnewthing/20050412-47/?p=35.... Must've been really frustrating.
by FabCH | 2026-03-05 22:46:33+00:00
Police show up and arrest you. Could be with reason, could be by accident. Maybe you did something wrong, maybe you didn’t. They also physically size your servers, and in doing so they unplug the system.

If you have disk encryption, your data now requires the police to force you to produce a password, which may or may not be within their powers, depending on the jurisdiction.

It’s strictly better to have full disk encryption and remote unlocking than no disk encryption at all, because it prevents such „system was switched off by accident“ attacks.
by logicprog | 2026-03-05 22:46:59+00:00
Also from that exact same study (why not cite the actual study? It's quite readable) the LLMs couldn't recite more than a small fraction of many other books, often ones just as well known[0] — in fact, from the bar charts shown in the exact news article you cited, it's pretty clear that Sonnet 3.7 was a massive outlier, and so was Harry Potter and the Sorcerer's Stone, so it really seems to me like that's an extremely unrepresentative example, and if all the other LLMs couldn't recite even a small fraction of all the other books except that one outlier pairing, despite them being widely reproduced classics, why would we expect LLMs to actually regurgitate regularly, especially a relatively unknown open source project that probably hasn't been separately reproduced that many times?

Not to mention the fact that, as the other commenters mention, that appears to just... not have happened at all in this case, so it's a moot point.

[0]: https://arxiv.org/pdf/2601.02671
by coldtea | 2026-03-05 22:47:03+00:00
>Hmm ... you don't have to ask for consent

Nobody said you have.

>You just slap the license you want to your code and that's it.

Nobody said you can't.

>It's not some sort of democracy, lol

Nobody said it is, lol.

I'm answering to what you actually wrote, that those expressing their dislike of a project having a speicific license are "either malicious or non mentally capable enough" what licenses are for.

That's a stupid argument putting other people down with a silly strawman.

One can be perfecty capable to understand what licenses are for and still think a project made a mistake chosing a specific language, or want it to change to another (and sometimes, like in the examples I gave, the latter works too).
by moehj | 2026-03-05 22:47:03+00:00
"Congrats on 2.0 — the BEAM's supervision and fault tolerance makes a lot of sense for agent workloads. One thing we've been tackling at ARU (aru-runtime.com) is the certification layer between agent intent and execution — validating outputs against a defined contract before they pass downstream. Curious whether Jido has opinions on output validation/certification, or if that's left to the application layer?"
by ChrisMarshallNY | 2026-03-05 22:47:10+00:00
Like pissing in beer vats?[0]

Sometimes, you can't fight it, but other times, trying to correct can only make things worse.

This is where having sober, experienced PR people and CEOs comes into play. There's no "textbook" way to deal with this stuff. It is different, each time, so you need smart leaders (something in short supply, these days).

The company that I worked for, was a camera company. One of their brand-protection strategies, was to have as much control as possible over any images made public from their cameras.

They went waaaaaay out of their way to help photographers get the best results, and it was a bitch to get test images from prerelease kit.

[0] https://www.atlasobscura.com/articles/corona-urine-rumor-cou...
by abound | 2026-03-05 22:47:42+00:00
I have a very similar setup to the author, but instead of running Tailscale in my initramfs, I have a Raspberry Pi sitting next to the home server (which is on my Tailscale network) and I use it like a bastion host. Process is something like:

1. SSH into the Pi

2. Issue the Wake-on-LAN packet to boot the server

3. Tunnel that server's SSH port to my laptop

4. SSH into the initramfs SSH server (I use TinySSH), enter the decryption key

5. Wait for server to come up, then access via Tailscale

This is more complicated than the author's setup in that it requires another device (the Pi), but it's simpler in that you don't need to have the initramfs on your Tailnet.
by moehj | 2026-03-05 22:48:25+00:00
"This is exactly the reliability gap we've been building around too. ARU (aru-runtime.com) approaches it from the certification angle — validating agent outputs against a contract before execution rather than after. Kybernis handles the idempotency problem at the execution boundary, ARU handles the output validity problem upstream. These could be complementary layers. Have you thought about pre-execution validation as part of the stack?"
by schiffern | 2026-03-05 22:48:29+00:00
If you don't mind a slightly nerdy appearance, the Airfanta 3 Pro is a PC fan "cube" with a good cost-performance ratio. Tl;dr real coverage is ~300 square feet or one room (whichever is smaller), run 24/7 on 50-70% speed depending on noise.

That's based on ASHRAE's 5 air changes per hour recommendation, which is sized to quickly filter out pollution that leaks through cracks in the building.
by jcul | 2026-03-05 22:49:25+00:00
I have something similar set up to unlock the drives on my home server. Just the SSH in initramfs though, tailscale is pretty cool.

I've done stuff with mkinitcpio / initramfs on arch before, can't remember exactly what for. I still run arch on my main laptop. I'm running nixos on my home server though, and adding something like this is so easy by comparison.
by nephihaha | 2026-03-05 22:49:40+00:00
No accident at all, in fact Lord Reith wanted the BBC to create the correct British values, i.e. to speak with a particular accent, to be loyal to the royal family and not to get involved in anything that was a threat to the system. The service was very much centred on London, with some paltry "regional" services.

The creation of ITV was supposed to provide an alternative, but was all too cosy and even today ITV pushes much the same programming as the BBC in outlook and news etc. The first real threat was pirate radio, which proved more popular than the BBC, and forced them to introduce Radio 1 for pop music.

Channel 4 was supposed to provide further competition, but in fact it was VCRs and video hire that really undermined the BBC's monopoly in the 80s. By the 90s, they were outclassed by satellite broadcasting (particularly sports and films). By the late 1990s, internet was breaking the state stranglehold on news and information... Leading to a crackdown in the 2010s with whatever scarestories they could come up with like cyberbullying, terrorism, pro-ana, porn etc.

Now the BBC are saying they want a fee for mobile phone and internet usage, although they haven't succeeded in that yet. Both of which are pretty much mandatory now.
by john_strinlai | 2026-03-05 22:49:49+00:00
>WoW basically evolved by Blizzard adding features in response to player feedback

blizzard is notorious for not responding to player feedback, as my original comment serves as just one example of, so i am not sure where you are getting this idea from. there is probably a super compilation somewhere of ion telling the player base that they are wrong about wanting X.

(to be fair to blizzard, they have been better at listening to feedback in the last ~2 years, but that is a very recent change.)

>and then the demand for Classic actually became overwhelming

this is the point in time where my comment starts. demand for classic became overwhelming, and yet they ignored it for years, while telling everyone "no, you are wrong, you do not want classic".

this is the key part: blizzard eventually released classic, and publicly admitted "we should have listened to you guys. you really did want classic.". turns out the player base did actually know what they want.

>And even so, I'm not sure Classic consistently has more players than Retail.

i am not sure what the relevance of this is.
by moehj | 2026-03-05 22:49:49+00:00
"Interesting architecture — embedding the agent inside the app context rather than outside it makes sense for session-aware tasks. One question: how do you handle output validation before the agent acts on the DOM? Client-side agents acting on live state without a certification layer seems like a reliability risk in production. We've been building ARU (aru-runtime.com) as a runtime certification layer for exactly this — curious if you've thought about that boundary."
by Foxboron | 2026-03-05 22:50:09+00:00
`mkinitcpio` supports both.

The `base` hook installs the shell PID 1, the `systemd` hook installs systemd as PID1. The default hook setup was changed with the latest'ish release to default too the `systemd` hook setup.

Shell `init`; https://gitlab.archlinux.org/archlinux/mkinitcpio/mkinitcpio...
by 47282847 | 2026-03-05 22:50:24+00:00
Things I consider most adventurous: Facing past trauma and healing from it, including coming to terms and re-arranging family relationships and other social relationships without causing harm. Taking responsibility in the world, both for past actions and future ones. Raising children with unconditional love. Settling conflicts in ways that result in a good outcome for everyone involved. Arranging life in a way to make these activities possible.

None of those adventures involve pyramids or startups, but a lot of courage, energy, and dragons.

I wonder how much you know about what people consider their own adventures, and how many they have had to face. Like divorce. Or sudden loss of job. Real world stuff.
by robcohen | 2026-03-05 22:50:29+00:00
> Proton only has access to your IP and device ID, not your data.

I like Proton. I use Proton.

However, the problem with proton is that if you access your email via a web browser, there's nothing stopping protonmail (to my knowledge) from reading your email from within their webapp via JS. This type of attack could be targeted at the behest of authorities.

So, actually, Proton COULD read your email (IFF you use webmail).
by keybored | 2026-03-05 22:50:36+00:00
People here complain that programmers aren’t engineers because real engineers can accidentally kill people and get sued if they mess an equation up. Instead of just breaking a build or something.

I think it’s more concerning that programmers seem to have no care or shame about designing systems that works against the users’ interests. Did you share something intimate in our chat? Well it’s not E2E, moron, we have that now. How could you be this stupid?

I can’t think of another profession (except pure value extraction types) which revels in exploiting people for not having the time or care to arrange their digital lives around the booby traps that nerds set for them.
by alopha | 2026-03-05 22:50:54+00:00
I've spent my career designing and building systems to help humans understand data and control computers. While I find this hard to swallow it's also hard to argue with. Tens of thousands of engineers and designers rebuilding slightly different drop-downs is an inefficient world that is unarguably coming to an end.

As so much of the first-line decision-making moves to LLMs there's definitely going to be opportunities for much richer and complex output from LLMs - how we can create terse and expressive visual summarisations/interfaces for where humans need to make decisions. But it's a much smaller world.

Where I suspect the wheels are going to come off for some though is that it's far, far easier to create a complex, difficult to understand UI than a simple one. And if simplicity and clarity are what enables effective LLM utilisation attempting to skip all that bothersome UX work will go poorly.
by cesarb | 2026-03-05 22:51:05+00:00
> One of those random scripts was a 2 year old malicious script from ruwiki. This script injects itself in the global Javascript on every page, and then in the userscripts of any user that runs into it, so it started spreading and doing damage really fast.

So, like the Samy worm? (https://en.wikipedia.org/wiki/Samy_%28computer_worm%29)