News for hackers. Stuff that matters.

arashvakil

Reddit Ads support is leaking PII and actively crossing user sessions

I have been dealing with a Reddit Ads account issue over the last week, and it has quickly escalated into a severe privacy and security red flag. It appears their customer support tools (or the agents themselves) are actively bleeding PII and crossing user sessions entirely.Over the last week, I have experienced three separate incidents in their live chat:Incident 1: Account Cross-Contamination...

( Read More... | 1 comment | 5 points | on HN )
All fair. Thanks for engaging seriously.

Seeding supply is the cold start problem that kills 90% of marketplaces. I'm not solving it with growth hacks. I'm solving it with my phone. People I know who've navigated hard things and want to give back. People who have gone through the rigors of private adoptions, experts in technology for the elderly, NYC teachers, etc.

Filtering scammers: the 100% nonprofit model is hopefully the filter. Grifters don't show up to platforms where they can't grift. It's like putting a salad bar in a casino, haha.

Expert-to-expert swaps? Love the idea. Hopefully I can build up to that once there's some activity here.

I'm building small, curated, and slow on purpose. Will it work? No idea. But the downside of trying is near zero.

Really appreciate the comment!

I built PassItOn.To in a week. One person. Here's the idea:

You book a video session with someone who's navigated what you're going through. Eldercare. Adoption. Career pivots. Teaching. Whatever. They set their rate ($50 to $250). 100% of that fee goes to a nonprofit they choose.

Not 10%. Not 50%. All of it. The expert never earns a dime.

The math on a $100 session:

- Stripe: $3.20 - Daily.co (video): $0.50 - You pay a $5 booking fee - $100 goes to charity

That $5 barely covers infrastructure. On higher sessions, we lose money. We're not optimizing for profit.

Why build this?

60% of young adults feel "seriously lonely." Our solution as a society? Chatbot companions. Sycophantic AI masquerading as relationships.

Meanwhile, real knowledge is locked away. People who've figured things out want to help others. They just don't want to become "coaches" or build personal brands.

This gives them a way to share what they know, fund a cause, and move on.

Tech stack: Next.js 15, Supabase, Stripe, Daily.co for video. Deployed on a shared OCI instance. The whole thing is embarrassingly simple because there are no retention hooks, upsell funnels, or subscription traps to build.

Cameo had 400 employees at its peak. Intro.co raised $25M. When you're not optimizing for extraction, the platform is simple.

Happy to answer questions about the build, the model, or why I think chatbots are a terrible solution to loneliness.

Show HN: I built a VPN management UI for my non-technical family

https://github.com/arashvakil/LeiaGuard

Hi HN,I wanted to give my family, who are scattered all over the world, a simple and private way to connect. The commercial options didn't quite fit, and the open-source tools I found were a bit too barebones and not friendly enough for non-technical users.My main goal was to build something completely self-service. I wanted my family to be able to manage their own devices without my help, so I...

( Read More... | no comments | 2 points | on HN )
Neat project!
Haha, I love 90s Geocities websites. I used Cursor AI - Give it a try
Yep, it’s 100% free—no paywalls, no sneaky upsells, just a tool to help people push back when they’re owed money.

I built this because I wanted to learn something new and help people who, like me, have been burned by shady contractors, landlords, or clients. No grand monetization plan, no hidden fees—just a way to level the playing field without paying a lawyer $400/hr to type three paragraphs.

If it helps people get what they’re owed, that’s a win in my book.

That’s why the tool doesn’t generate fake legal letterheads or make it look like an attorney is behind it.

But here’s the thing—you don’t need the illusion of a law firm to make a demand letter effective. The real power is in the clear, structured, state-specific language that signals to the recipient: I know my rights, I know what you owe me, and I’m serious about collecting. Most people cave because they realize the next step isn’t just another email—it’s small claims or legal escalation.

Would a letterhead help? Maybe. But the goal here is leverage without crossing legal lines.

You’re not wrong—letterhead does add a certain “oh sh*t” factor. But the real power move? Clarity + Confidence. Most disputes don’t actually go to court, they get resolved because one side sounds like they know what they’re doing.

Would an official legal firm letterhead help? Sure. But a well-structured, legally sound demand letter—even without the fancy stationery—is often enough to make someone take it seriously. Especially when they realize the next step is actual legal action.

That said, I’m open to ideas—maybe a future version offers something to bridge that perception gap.

I’m Arash, a real human who’s been burned by this exact problem—along with plenty of friends—so I built this as a free tool to help people avoid the same headache.

No data collection, no sneaky monetization, just a straightforward way to push back when someone’s trying to stiff you. If it helps, great. If not, at least you didn’t have to pay $400+/hr to find out.

Yeah, if certain folks had their way, wage theft would go from “illegal” to “just good business.” The reality? Companies will always push the limits when there’s no accountability. That $230M is just the tip of the iceberg—imagine how much goes unclaimed because people don’t know their rights or don’t want to fight.

That’s why tools like this exist. Because whether the system is working for you or actively trying to break you, knowing how to push back is half the battle.

I don't see why not. I'll work on it. :)
Yep—no smoke and mirrors here. It’s an LLM-powered service. The form isn’t just window dressing; it makes sure you include the right details so you don’t end up sending a "kindly pay me back, please" email that gets ignored.

The real value? Structure, specificity, and making sure your demand actually sounds like something that lands with weight. Otherwise, you’re just asking nicely—and in the world of unpaid invoices, "nice" doesn’t cut it.

Bingo—of course we use an LLM. No human is sitting there churning out demand letters by candlelight. The magic isn’t just in AI spitting out legal-ish text (any LLM can do that); it’s in making sure the letter is structured, state-specific, and actually persuasive—so you don’t accidentally send something that screams “I just copy-pasted this from the internet.”

As for the sender domain—right now, you download and send it yourself. No fake law firm theatrics, just a clean, well-structured letter that gets people to pay attention (and hopefully, pay up). The power move is sending it yourself and making them think you mean business.

You could CC a lawyer’s email if you want to add some theatrical flair, but the real power move is in the perception of legal escalation, not an actual inbox ping to [email protected]. The letter itself, dripping with "I know my rights" energy—is what gets people moving.

That said, if you do have a lawyer friend willing to play along, CC’ing them can add some weight. But most of the time, just sending a firm, well-written demand letter does the trick—no expensive legal cameos required.

This is fixed now! Thanks again.
Totally—lawyers are problem solvers. But they also have a perverse incentive to extend problems, because billable hours are the name of the game. The high costs? Sure, some of it goes to deep research and strategic thinking... but a lot of it is just typing words onto a page with a letterhead.

Not saying there’s no value in legal expertise (I’d love to have a top-tier lawyer when I need one), but for 90% of disputes, you don’t need a high-priced litigator—you just need to sound serious enough to make the other side flinch. That’s where FreeDemandLetter comes in: solving the problem before it becomes a legal drama.

Exactly the kind of thing the U.S. legal system would never implement because it makes too much sense.

Here, getting paid often feels like a side quest in a bureaucracy-themed video game. No centralized “fill out a form and get your money” option—just a patchwork of small claims courts, demand letters, and hoping the person who owes you money has a moment of conscience (unlikely).

FreeDemandLetter is basically a hack for that broken system—skip the $400/hr attorney tax and make your demand official, fast. Not as good as the EU’s system, but until the U.S. gets its act together, it’s the next best thing.

Right now, "send it" means you download the letter and handle delivery yourself—email, snail mail, carrier pigeon, whatever works. No, we don’t physically mail it (yet). No, we don’t offer legal advice. I do think we could send referrals to lawyers for the really nasty stuff that require legal expertise - but I just hope this tool can help someone avoid that and the expense.
Love it. The AI-powered legal flex. You didn’t just demand hot water—you weaponized syntax. The reality is, most of these disputes aren’t about legality, they’re about perceived authority. A well-worded, confident letter triggers the “oh sh*t” response in whoever’s reading it. I just want to make that easy for people to use.
Bingo. The system isn’t built to help you—it’s built to exhaust you. It banks on the idea that you’ll get frustrated, give up, and move on with your life. That’s why precision matters—right language, right proof, right tone. And yes, the legal letterhead can have some psychological weight, but the real power move? Showing you know the rules and aren’t rolling over.

As for companies lawyer-ing up over $150? Exactly. No one’s paying $250/hr to dodge that—so a formal, well-structured demand letter forces their hand. It’s the legal equivalent of bringing a clipboard into a store—you look official, so people assume you are.

The game is rigged, but at least we can rig it back in our favor.

API is getting hammered! Thank you for reporting it!
Thanks for the comments and feedback! In my experience this kind of nasty-gram gets people to the table and lets them know you mean business.

Show HN: FreeDemandLetter – A Weapon for Anyone Who's Sick of Getting Shafted

https://www.freedemandletter.com

Folks,If you’ve ever been stiffed by a client, contractor, or random jerk, let me tell you: sending a “Please pay me ___” Post-it note ain’t gonna cut it. That’s why I built FreeDemandLetter—and no, I’m not a lawyer, but I sure was a pissed-off contractor who got sick of watching lawyers charge $400 an hour to type three paragraphs.Why You Should Care- $230M in back wages was recovered by the...

( Read More... | 57 comments | 27 points | on HN )