News for hackers. Stuff that matters.

codexon

I have no idea. Probably depends on how big you are as a company that the credit cards would care enough to step in rather than lose a customer or how much that customer costs them.

All I know is that for the chargebacks I've gotten for my saas, I submit a mountain of evidence that the user used it heavily and then filed a chargeback after the subscription ends.

Most of the times paypal will even agree the customer scammed, and they say they will talk to the credit card company on our behalf. However we have never once won one of these chargebacks if it was done with a credit card. Then paypal proceeds to remove the money from our account and tack on a chargeback fee.

> On the other side of the transaction, the credit card company is guaranteeing payment to the merchant, who now doesn't have to care about trying to assess the financial reliability of every customer.

The customer can file a chargeback in which case they win almost every time even if they are scamming.

How hasn't reddit sued them offline yet?
How did you scrape reddit comments? Doesn't this require expensive licensing from reddit? How do you handle comments that were deleted by users?
Re:Understanding the Recent DDoS Attack Against Read the Docs on Wednesday September 09, 2026 @08:24PM (#49636540)
The problem is most of the botnet zombies are in places with very little rule of law like eastern europe/russia/south america/china. It is an exercise in futility and the richest customers just opt to just spend money on more protection than shutting down the zombies.

If the zombie is in the US, hosts like Google or Amazon will take 1+ month to respond.

Re:Qwen 3.8 27B available on Cerebras at 1500 tokens/s on Thursday September 03, 2026 @03:08PM (#49555088)
I never said offloading was impossible. It will result in a large slowdown.

It would look bad for cerebras if other people are hosting the 27b version and show a higher TPS than cerebras.

Re:Qwen 3.8 27B available on Cerebras at 1500 tokens/s on Thursday September 03, 2026 @02:51PM (#49554830)
The wafer only has space for 44 gb of sram. If they offload ram they lose the speedup of having everything on 1 chip (the whole point of cerebras).
Re:Muse Spark 1.3 on Wednesday September 02, 2026 @07:35PM (#49544063)
They are still offering full mythos to project glasswing companies and those that pay them enough.
Re:Muse Spark 1.3 on Wednesday September 02, 2026 @07:14PM (#49543895)
They gave a few of the largest companies access to mythos.

Half a year later, it is still not available to everyone else.

Re:Hang on to Your Firefox on Tuesday September 01, 2026 @09:59PM (#49530856)
I don't have any issues with the extra features they try to tack on. I just disable them.

I just wish they would fix the memory leaks and stuttering.

Re:Hang on to Your Firefox on Tuesday September 01, 2026 @09:35PM (#49530686)
I want to be able to recommend firefox to everybody, but after 15 years of chrome and going back to firefox, it still feels jank.

Web apps like twitter youtube discord that is left open for a few hours take up >2gb ram and is jittery. I have to shift+esc and close them to make them run smoothly again. Why hasn't stuff like this been fixed yet?

Why do I need to open about:profiles just to launch a new profile?

Re:Claude Fable 5.1 and Claude Mythos 5.1 on Tuesday September 01, 2026 @05:17PM (#49528328)
Rumors are that if your company spends a lot, they will also remove safeguards.
Re:Claude Fable 5.1 and Claude Mythos 5.1 on Tuesday September 01, 2026 @02:38PM (#49526117)
I heard the only way you are going to get into the CVP program is if you have public CVEs. Doesn't seem to matter if you are in a company account or not according to people that are supposedly in the program.
I used to use firefox a long time ago but got tired of all the memory leaks and lag before I switched to chrome.

Now that mv2 is going away, I switch back to firefox, and it still has memory leak issues after all these years, it is really disappointing.

Claude Code now appends a link to a Claude session in every commit

Claude code now appends every commit with this line, everyone is opted in automatically.This link is only accessible to the user so it doesn't make sense to be put in a commit.Claude-Session: https://claude.ai/code/session_...There is a new setting that allows you to disable it. "attribution": { "sessionUrl": false }

( Read More... | 2 comments | 4 points | on HN )
I'm not a biochemist and I have been blocked by fable and opus for "cyber" just for doing things like asking it to ssh into one of my servers, look at a CVE, or do work in assembly. Been rejected to their cyber verification program 3 times already.
Re:AI is removing the middle class of software engineering on Thursday August 13, 2026 @06:23PM (#49292558)
There was absolutely nothing showing that it was vibe coded other than the fact that a website that didn't get any updates for 5 years suddenly got a 20+ bullet point update. People just assumed it was vibed because of the sheer number of changes.

There was not 1 mention about anything being broken, they were simply complaining about AI.

Anti-AI psychosis is a very real thing that is happening https://x.com/Jediwolf/status/2054776716770320631

Re:AI is removing the middle class of software engineering on Wednesday August 12, 2026 @11:15PM (#49281398)
Not everything needs to be amazon/google scale backed with things like sharded dbs or kubernetes.
Re:AI is removing the middle class of software engineering on Wednesday August 12, 2026 @09:08PM (#49280626)
The output is indistinguishable from manually written code.
Re:AI is removing the middle class of software engineering on Wednesday August 12, 2026 @08:56PM (#49280550)
There's nothing wrong with vibe coding as long as the quality is good.
Re:AI is removing the middle class of software engineering on Wednesday August 12, 2026 @05:44PM (#49278999)
Marketing? Who knows? I haven't used photoshop a single time ever since I found out about photopea.
Re:AI is removing the middle class of software engineering on Wednesday August 12, 2026 @05:28PM (#49278807)
There's very little incentive for people to advertise that their product was vibe coded. In fact there's many incentives to hide it. Many people hate AI and why would you invite more competition?

Bun gets a lot of hate for vibe coding.

I vibe coded to modernize one of my old hobby websites (so not even vibe coding from scratch) and I immediately got anti-AI comments, and I didn't even say I used AI.

Re:AI is removing the middle class of software engineering on Wednesday August 12, 2026 @04:58PM (#49278458)
Many of those companies like duolingo have already collapsed in stock price with YoY growth dropping off a cliff. It is happening, it just isn't instant.
Re:AI is removing the middle class of software engineering on Wednesday August 12, 2026 @04:46PM (#49278324)
There are multiple "photoshop killers" already available, even for free like photopea. I would bet that you can ask AI to make a clone of it. People just haven't done it because there's no need to waste tokens on that.
Re:Go is an ideal language for AI-assisted software engineering on Wednesday August 12, 2026 @04:19PM (#49278014)
When I meant compile I also meant cargo check. That still takes way longer than go builds.
Rust compiles way slower in my experience. This is a major problem because ais need to recompile many times especially when it keeps running into borrow checker problems.

With golang, all borrow checker problems go away. This is a good trade off if your app is not cpu-bound, which most are not. If you need every last drop of performance then rust is a better choice of course.

However, I have run into a few cases of runtime null crashes in go.

Re:What Happened to HackerOne? on Monday August 10, 2026 @02:38PM (#49247838)
You are right, but it was a billion+ revenue company that everyone here knows about and probably interacts with every day. I've also heard from others than other companies act the same way.

And they have hackerone employees pre-screen submissions and I had to tell them multiple times why my submission was valid.

Re:What Happened to HackerOne? on Sunday August 09, 2026 @11:47PM (#49239004)
it isn't simple request flooding, it is application level resource exhaustion
Re:What Happened to HackerOne? on Sunday August 09, 2026 @11:35PM (#49238940)
I reported some exploits on hackerone.

Most got dismissed.

One of them, a remotely triggerable DoS vector got downgraded in severity. I got a token payment from the company, and 7 years later, it is still not marked as resolved.

I doubt my situation is unique.

Older »