News for hackers. Stuff that matters.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by un-nf on Thursday April 30, 2026 @03:40PM (#47967263)
LinkedIn runs an extension scan against a hardcoded list of 6,278 Chrome extensions on every visit. Detected results are packaged into encrypted telemetry and injected as an HTTP header into every subsequent API request during your session. This data can be used to identify your religious affiliations, tax-bracket, job search intent, and more.

I verified this myself and traced the implementation. Details and the technical breakdown in the article.

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by kyleee on Thursday April 30, 2026 @05:19PM (#47968358)
And certainly fingerprint you right?
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by flomo on Thursday April 30, 2026 @07:17PM (#47969543)
Probably mostly for abuse prevention. Lots of extensions like this one:

https://addons.mozilla.org/en-US/firefox/addon/linkedin-data...

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by hirako2000 on Thursday April 30, 2026 @07:22PM (#47969603)
The "abuse" is that one doesn't have to copy paste for hours.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by WJW on Thursday April 30, 2026 @05:48PM (#47968661)
I guess that's what they're hoping for. With my admittedly biased opinion of the average linkedin user, about 99% will have the default set of extensions installed and so will not be very useful. Those users might have other identifiers of course, so who knows.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by jwpapi on Thursday April 30, 2026 @06:00PM (#47968787)
I’m pretty sure it’s not 99% you would wonder how many differences there are along with user-agent resolution and ip range...

I think 99% are identifiable

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by flomo on Thursday April 30, 2026 @07:19PM (#47969561)
Ideally about 99% of LinkedIn users are using their professional name, occupation, and location.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by RobRivera on Thursday April 30, 2026 @06:23PM (#47969026)
Oh man time to see if there is a chrome Bonzai Buddy extension
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by echelon on Thursday April 30, 2026 @05:29PM (#47968461)
Can someone here please create a LinkedIn replacement for developers that

1. Doesn't have the spam

2. That doesn't look like it's from 2008

3. That only developers / engineers / tech folks can join

4. Doesn't try to log into your email to steal your contact list

5. That doesn't track you or your extensions / browser fingerprint

6. That doesn't have a bunch of fake "linkedinmaxxing" garbage content

7. that doesn't have marketers and recruiters, etc.

8. ...

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by jszymborski on Thursday April 30, 2026 @05:50PM (#47968685)
Just type about:blank in your browser, and you'll get what you're asking for ;)
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by SpyCoder77 on Thursday April 30, 2026 @07:27PM (#47969645)
This is not going unappreciated :)
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by kevin_thibedeau on Thursday April 30, 2026 @07:13PM (#47969505)
Stack Exchange sort of tried to do this. It never seemed to get off the ground.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by traderj0e on Thursday April 30, 2026 @06:32PM (#47969118)
I thought the whole point of LinkedIn was getting a job, but that would run afoul of #7. You can ignore the rest of the crap on their website.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by slater on Thursday April 30, 2026 @06:33PM (#47969128)
How ever did people get jobs before recruiters? /s
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by gerdesj on Thursday April 30, 2026 @07:40PM (#47969752)
If you write a decent covering letter and enclose a CV (resume) and get it to my desk, I might be inclined to be interested in you.

That's how things used to be done. Recruiters did exist but you generally got off your arse and impressed a potential employer with a well laid out CV as an invitation to call to interview.

Nowadays it appears that people want to circumvent all that complicated effort bollocks. You simply spray yourself across some social media wankery and let's face it LinkedIn is the supreme example of wankery and some grateful employer will pick you up.

The next time you are considering buying a record player to engage with the past in some sort of misty eyed histrionics session, why not buy a pen and paper and write a letter and impress someone with your turn of phrase? Enclose a CV (resume) for maximum effect.

... "Nurse ... nurse ... my dried frog pills have started dancing on my eyeballs ... nurse ... "

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by traderj0e on Thursday April 30, 2026 @06:39PM (#47969183)
Well, how? Recruiters got me job offers when I graduated college. I had no connections otherwise.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by ddoolin on Thursday April 30, 2026 @07:27PM (#47969644)
Same way they do it now. Cold applying, word of mouth/referrals, networking events, etc. Personally my first industry job in like 2012 originated from a networking mixer that I showed up to after seeing a promotional online. My unpaid internship/mentorship before that was a word of mouth from my mom asking her friend's husband which I suppose might count as a connection.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by nicoburns on Thursday April 30, 2026 @07:39PM (#47969746)
You search for job advertisements, and then send in an application!
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by traderj0e on Thursday April 30, 2026 @07:40PM (#47969756)
But that application goes to a recruiter. Guess if you mean the site shouldn't have recruiters doing the cold-calling, idk maybe, but then the game is in getting the recruiters to read your application. This is different from having connections.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by angoragoats on Thursday April 30, 2026 @07:46PM (#47969806)
I think OP was referring to applying direct with the company doing the hiring. This is how I landed my first several jobs in tech, no recruiters involved.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by traderj0e on Thursday April 30, 2026 @07:55PM (#47969855)
Gotcha. Ok the companies themselves reached out on LinkedIn to me. It wasn't those third-party recruiters like "I recruit for Tesla, Apple, Sigma, IBM..." I ignored those emails. But it was still a recruiter within the company, not a technical manager or IC.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by mlmonkey on Thursday April 30, 2026 @08:44PM (#47970156)
Back in the day, CACM use to have job listings at the back. There was always DE Shaw advertising. Sending in printed CVs and cover letters was the slow and painful way to do it.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by pimeys on Thursday April 30, 2026 @06:40PM (#47969203)
Getting a job across the border is easier with LinkedIn...
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by b3ing on Thursday April 30, 2026 @08:56PM (#47970221)
Cold applying by letters or just walking in and asking for an application

Applying to jobs posted in the newspapers

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by not2b on Thursday April 30, 2026 @07:50PM (#47969836)
If by some miracle someone managed to create this, and a critical mass of people somehow discovered it and used it, at some point they'd burn out, sell it, and it would turn into the same shit that we see everywhere else.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by wizardforhire on Thursday April 30, 2026 @07:56PM (#47969859)
Not if you organize it as a non-profit with stated purpose that explicitly address exactly that… and is run as a public service for the public good.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by stephenhuey on Thursday April 30, 2026 @08:14PM (#47969985)
Might have better success with a Public Benefit Corporation instead of a nonprofit. I’ve considered starting some myself.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by stack_framer on Thursday April 30, 2026 @08:18PM (#47970011)
Now do OpenAI...
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by recursivegirth on Thursday April 30, 2026 @05:33PM (#47968502)
IRC has existed for decades.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by yrcyrc on Thursday April 30, 2026 @06:30PM (#47969096)
I met some of my girlfriends through irc :)
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by 867-5309 on Thursday April 30, 2026 @07:50PM (#47969832)
..said no IRC user, ever
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by echelon on Thursday April 30, 2026 @05:45PM (#47968633)
And it's a ghost town.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by antiframe on Thursday April 30, 2026 @06:23PM (#47969025)
I suppose that depends on where you go and what you expect. Older communities are better populated than younger ones. (Not age-wise but topic-wise).
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by lacunary on Thursday April 30, 2026 @07:22PM (#47969605)
where's a good irc chat these days?
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by antiframe on Friday May 01, 2026 @05:00PM (#47980264)
It depends on the time of day, but #emacs, #nethack, #archlinux, #lobsters, #security, #openbsd usually have enough users for good convos. It depends on what you are into, really.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by zeafoamrun on Thursday April 30, 2026 @05:41PM (#47968582)
Seriously. We need some kind of federated replacement. Who is building this?
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by WJW on Thursday April 30, 2026 @05:48PM (#47968665)
Be the change you want to see mate.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by reg_dunlop on Thursday April 30, 2026 @05:56PM (#47968747)
It's odd, yeah?

We have the ability to vibe these things over a weekend, yet getting to the critical mass/tipping point of adoption is something else.

Whatever happened to: if you build it, they will come?

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by HWR_14 on Thursday April 30, 2026 @06:30PM (#47969097)
It only took a weekend to build a social network preAI
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by jll29 on Thursday April 30, 2026 @06:05PM (#47968837)
If you want it to happen, we should talk requirements - what would you want from a LinkedIn NextGen?

- A professional profile page

- Contacts

- Introductions/referrals

- Ask my (sub-)network?

Anything else?

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by bix6 on Thursday April 30, 2026 @06:20PM (#47968999)
A way for you to make money that isn’t ads / harvesting my data.

Exportable format so I can leave if needed.

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by reg_dunlop on Thursday April 30, 2026 @06:26PM (#47969057)
It's tough to generate revenue that isn't through ads.

That said, if the users could organize into special interest groups and create a walled-garden with default no ads, and then gate-keep advertisers to a permitted white-list.

I dunno, I'm just spit-ballin

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by eptcyka on Thursday April 30, 2026 @06:51PM (#47969309)
You want the unemployed to pay? Or do you want the employers to pay? If you want the employers to pay, how do you attract enough attractive unemployed to your site?
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by traderj0e on Thursday April 30, 2026 @07:25PM (#47969627)
Employers pay, unemployed will go where there are places to get jobs. But this assumes employers are unsatisfied with LinkedIn somehow. Are they?
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by reg_dunlop on Friday May 01, 2026 @12:56PM (#47977096)
Well I guess we have a possible reason why LI is still relevant.

This suggest then that the relevance of any solution would need to appease the employers... yet here we are trying to build/design something for employees first.

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by traderj0e on Friday May 01, 2026 @04:54PM (#47980168)
Right, the website being annoying doesn't really matter compared to the network quality.

One thing I've considered, what if there were a site where you could rep trusted people anonymously? Then employers (or buyers etc) can see if there's some path from themselves to the candidate, at least to know they aren't some total rando who could be a scammer. The thing is, it's hard to obfuscate the reps if you're answering those queries, and it all falls apart once someone can prove that they gave or received rep.

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by reg_dunlop on Saturday May 02, 2026 @11:22AM (#47987210)
I really like the anonymous angle. Suspending the unspoken reality of bias and profiling by employers, the point of job postings is to fill a skill void, I think. The idea of embellishing the recommendations seems like it would require some sort of validation of the recommendation giver...so yeah, eventually there needs to be some verifiabilty.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by traderj0e on Monday May 04, 2026 @12:53PM (#48011348)
There is one piece of non-anonymity, you know who you're repping. The system only cares if there's a path from you to the target, so there will never be a path from you to a bot unless a real person you indirectly know reps a bot. 1000 bots can rep each other and nobody will care.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by conductr on Thursday April 30, 2026 @06:20PM (#47969001)
Works for baseball fields, not websites
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by sds357 on Thursday April 30, 2026 @08:00PM (#47969882)
in movies, not RL
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by somat on Thursday April 30, 2026 @08:00PM (#47969889)
It's called "The Web"
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by johnecheck on Thursday April 30, 2026 @07:12PM (#47969493)
sifa.id aspires to that.

Wishing Guido (gui.do) the best.

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by skeeter2020 on Thursday April 30, 2026 @06:30PM (#47969095)
what exactly do you want this for? I think HN satisfies all of these (#2 - HN has a mid 90's aesthetic)
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by WD-42 on Thursday April 30, 2026 @05:39PM (#47968568)
I feel like Github became this in the last 10-15 years.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by traderj0e on Thursday April 30, 2026 @06:43PM (#47969234)
Yes. But now we need a replacement for what the old GitHub used to do.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by HoldOnAMinute on Thursday April 30, 2026 @06:53PM (#47969330)
You need a new type of corporation.

Only a Public Benefit Corporation will get the software to a usable state and refuse enshittification

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by traderj0e on Thursday April 30, 2026 @06:57PM (#47969355)
Well the challenge is also gatekeeping. Gotta keep non-technical people or intentions off of it for #3
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by avaer on Thursday April 30, 2026 @06:25PM (#47969047)
How much would you pay for this?
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by traderj0e on Thursday April 30, 2026 @07:29PM (#47969658)
Yeah that's the thing, slight fee vs more annoying site doesn't matter that much. LinkedIn got me a job. Sure I had to give a burner email for them to ddos, but so what. If I were to use another site, it'd be because that's where recruiters are, not cause it's a nicer site.

Anyway if you magically copied the entire LinkedIn network to a clean, no-nonsense site and wanted $5/mo to be active on there during the time I'm seeking a job, I'd pay that. And it'd be more if it had better opportunities. I guess there's LinkedIn Premium, but eh not convinced on that.

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by Klayy on Thursday April 30, 2026 @05:35PM (#47968521)
Maybe that's what the new Friendster should be
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by fuzzfactor on Friday May 01, 2026 @11:07AM (#47975684)
Friendster sounds like a great idea for a platform to take this on.

Is there anything else making a new start right now with as well-known a name? That could make a major difference in building critical mass fast enough.

Now Friendster is already moving in its own new direction [0], but it would still be a good portal to a separate new jobs board that only needs to start out with zero bullshit and one key thing a little bit better than Linkedin in some very important area, then gradually diverge further from there if necessary.

No need to even try to replace Linkedin (who wants another one of those?), the only thing that a better option needs to have to become sustainable, is to be better for a few million visitors on a regular basis. Maybe way fewer would be adequate if done right, IDK.

I don't think Friendster is going to stop short of that, so there you go.

Plus IIRC Friendster is already paid for and owes nobody anything. If it stays that way it could turn out to be a surprising advantage. No matter how big Linkedin is I can only imagine that it is "mortgaged" up the wazoo like anything else, it's a whale like no other.

Friendster could go into the kind of shallow water where it can thrive, and Linkedin would be effectively beached.

[0] Very cool the way their plan for physical contact or proximity looks like it will restrict bot activity just when it's needed most, while accepting the limitation to unbridled growth that this implies.

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by FridgeSeal on Thursday April 30, 2026 @06:15PM (#47968937)
LinkedIn is a cesspool, but it’s almost worthless to me without the recruiters.

They’re basically the only reason I’m there.

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by pizzly on Thursday April 30, 2026 @06:45PM (#47969252)
Also a lack of LinkedIn account makes you more suspicious and less likely to get hired. So this is additional value in having an account. For appearances.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by Loughla on Thursday April 30, 2026 @07:43PM (#47969780)
That really depends on the field. Only one position asked about my LinkedIn. And that was because they had you apply via the site.

I didn't apply, because fuck that inside out.

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by jamesfinlayson on Thursday April 30, 2026 @08:49PM (#47970185)
Yeah I recently heard about people working multiple jobs at once - I wasn't surprised - with work from home being a thing and many jobs at big companies being not overly strenuous, you can get away with it.

A previous coworker had been not especially good at his job and left after two months, and a little later I went looking for his LinkedIn to see where he'd ended up. Couldn't find him but didn't give it much thought. A friend told me that he was working at a company up the street but was also working another job at the same time, and the penny dropped - you can't have LinkedIn and be working two jobs at once and reasonably expect to get away with it or get hired again.

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by seattle_spring on Thursday April 30, 2026 @07:55PM (#47969857)
> 3. That only developers / engineers / tech folks can join

Is at odds with

> 6. That doesn't have a bunch of fake "linkedinmaxxing" garbage content

Almost all of the shit-tier AI-generated AI evangelism has been from "tech folks" connections. It's all the exact same content.

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by ImJasonH on Thursday April 30, 2026 @05:36PM (#47968532)
Can you create it?
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by metalliqaz on Thursday April 30, 2026 @06:24PM (#47969041)
Except for #2 I think you're looking for Hacker News.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by skeeter2020 on Thursday April 30, 2026 @06:32PM (#47969114)
didn't see your comment when I said basically the same thing. #2 is good though, bc HN has a pre-2008 look
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by jachee on Thursday April 30, 2026 @05:35PM (#47968515)
You’re already looking at it, buddy.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by StilesCrisis on Thursday April 30, 2026 @05:36PM (#47968534)
This looks like it's from 2008
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by 1over137 on Thursday April 30, 2026 @05:50PM (#47968687)
and thank god too. Modern design is bloated crap.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by traderj0e on Thursday April 30, 2026 @06:44PM (#47969249)
Looks older than that, which is great
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by gedy on Thursday April 30, 2026 @05:43PM (#47968603)
LinkedIn without the news/post feed would be fine
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by ricardonunez on Thursday April 30, 2026 @05:51PM (#47968691)
There’s an extension called News Feed Eradicator that does that for you.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by mcintyre1994 on Thursday April 30, 2026 @05:54PM (#47968720)
Wonder if it’s on their list of extensions to spy on!
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by selcuka on Thursday April 30, 2026 @08:26PM (#47970059)
We should be good if the Eradicator extension eradicates the script that scans for extensions.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by em-bee on Thursday April 30, 2026 @06:18PM (#47968979)
i just don't open the main page with the feed. i practically don't notice it's there. i have the messages view open, and i check notifications. i also don't follow anyone (except my contacts)
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by bluedino on Thursday April 30, 2026 @06:39PM (#47969174)
And the useless notifications
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by seattle_spring on Thursday April 30, 2026 @07:41PM (#47969762)
Having a notification that just shows me an ad for "LinkedIn premium" should be a crime.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by Lerc on Thursday April 30, 2026 @06:16PM (#47968956)
Can you confirm that the title is correct and that it encrypts rather than hashes?

Both are concerns, but sending interpretable data is a more serious concern.

I scanned through the article and did not see an example of the header it added.

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by stingraycharles on Thursday April 30, 2026 @06:24PM (#47969035)
It says RSA public key encryption in the article, so I’m going to assume that it’s not a typo.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by phantomathkg on Thursday April 30, 2026 @08:04PM (#47969917)
can, but how? Have you verify all 6278 and what they do?
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by cromka on Thursday April 30, 2026 @08:16PM (#47970003)
sounds like you haven't heard of fingerprinting yet and how specific it is
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by yunwal on Thursday April 30, 2026 @08:52PM (#47970198)
Reversible encryption wouldn’t be required for fingerprinting. They’re doing something even more sinister here.
Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by cromka on Thursday April 30, 2026 @08:15PM (#47969996)
Call me crazy but both Google and MS started doing weird things like that since about the dinner at Trump. Did you know that Google Chrome now happily asks you to store your ID/Passport information on top of all the information they offered to store for the last 10 years or so? Why now? Why this crazy "enhanced" feature? (https://blog.google/products-and-platforms/products/chrome/e...)

I am far from conspiracy theorist but, god damn, if you take a few steps back from all the current madness and look at what's happening from a perspective, then YES, they're collecting all that data and it up to specific people and their IDs. I don't even want to guess how deep are Palantir and AI chat in this.

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by estimator7292 on Thursday April 30, 2026 @08:51PM (#47970191)
This is complete and utter conspiracy nonsense.

This kind of tracking has been going on for decades

Re:LinkedIn scans for 6,278 extensions and encrypts the resu... by tomhow on Thursday April 30, 2026 @09:17PM (#47970304)
This is a good example of why post summaries are considered off-topic on HN. If it becomes the top comment (which it often does if people agree with it or are riled up by it) they'll reply to the summary rather than posting their replies as root comments to the main thread, creating a split between replies to the top comment and root replies.

Also, please don't use a title for the HN submission that's different from the title of the original post. The guidelines are specific about this.