News for hackers. Stuff that matters.

construct0

Re:Teen Safety, Freedom, and Privacy on Wednesday September 17, 2025 @09:56AM (#45275911)
“We’re building an age-prediction system to estimate age based on how people use ChatGPT.” Is there something wrong with simply asking the user when they register? (volatile age not DOB).
Re:We replaced passwords with something worse on Thursday August 07, 2025 @09:42AM (#44824350)
It’s still possible to use a button in the email if you include a copypasteable variant in the mail itself.
Re:Ask HN: Who wants to be hired? (August 2025) on Saturday August 02, 2025 @06:49AM (#44766484)
Location: East-flanders, Belgium

Remote: Hybrid

Willing to relocate: Yes

Technologies: Mainly .NET, Python & React

Résumé/CV: On request

Email: [email protected]

Demands increasing page size if you sync frequently (bandwidth).
Re:MitmProxy2Swagger: Automagically reverse-engineer REST APIs on Thursday January 02, 2025 @06:20AM (#42573537)
Yeah - does this get nullabilities right?
Re:GPT-5 is behind schedule on Sunday December 22, 2024 @08:27AM (#42486161)
The world is figuring out how to make this technology fit and work and somehow this is "behind" schedule. It's almost comical.
Re:The Deterioration of Google on Sunday December 01, 2024 @02:36PM (#42290196)
Yeah, if you're specific about it and know what to expect it's usually workable. In any case, this blog post is an indicator of what's about to come next.
Tried example. No redirect occurred after 3 SHIFT presses, had to use both ESC and SHIFT to trigger it somehow. The irony.
Re:Is Tor still safe to use? on Wednesday September 18, 2024 @03:48PM (#41584615)
Yes, there aren’t that many tor nodes. It’s not the safe haven protocol or transport suite people make it out to be.
Re:Open Source Twitch for Developers on Friday August 30, 2024 @07:27AM (#41399687)
What's the relation with Twitch?
I see the post got flagged, sad to see but if that's the verdict this'll be the last comment on this post.

The title is not "I caught a Russian developer doing bad things during war!!", the title mentions "a cautionary tale", which from my point of view is a PSA through the means of sharing observations and my interpretation, with some speculation to inform the reader of possible avenues which may affect them, if not through this repository, through another.

To close my writing I'll include the content of a comment in response to a different user, which should define my intent:

"My point would mainly be to spread awareness and share an experience and my interpretation of it, not "slander" and paint a target on my back by namecalling and divulging more information which doesn't serve a purpose beyond wanting clout under the assumption that the war does not affect myself and others around me."

Thanks. Have a good weekend.

My point would mainly be to spread awareness and share an experience and my interpretation of it, not "slander" and paint a target on my back by namecalling and divulging more information which doesn't serve a purpose beyond wanting clout under the assumption that the war does not affect myself and others around me.

Thanks for reading. Have a good weekend.

That's fair, shall I put the names in the article and a link to the repository? Really, it's a war. Do you think I will risk my own wellbeing just to have clout for a few days?

Not to mention opening myself up for the possibility of being sued by one or more contributors for "slander". I chose this approach and won't budge on that - it's not a fairy tale that people are dying and everything is affected by it, the list of embargos is considerable.

Consider that you are connected to the world - including Russia. Would you trust your Russian neighbour if he pivoted his development style, opinions, pace, characteristics? No.

Have a great weekend. Thank you.

Major shifts in behavior from the lead developer does not concern you? Overthrowing the dependencies used and opting in for more experimental and not as battletested JS frameworks does not alarm you?

Going against a strong personal opinion after stagnation of development and a complete pivot on multiple levels is normal to you?

Shall I mention mainframes still run COBOL? Should I introduce the latest version of this library to achieve the same? You do know it entails more chance of something wrong happening, and yes the developer is Russian, didn't we have an advisory against Kaspersky?

Why would a repository with six figure stars be negligible and Kaspersky not? Please read other comments as well. Thanks for your perspective and have a great weekend.

It's more than just this - I wouldn't write a "conspiratorial article" out of nothing, but alas I can not provide depth without risking identification of the people involved and painting a target on my back.

I am watching the advisories for the dependencies closely. Please check my other comment as well.

Thank you, have a great weekend.

Thanks for your comments. I have to admit that it is shallow - going in more detail would risk identification of the people involved and paint a target on my back.

I do realize that he may have simply changed his opinion - yet it is the most controversial one and he stood by it ideologically as expressed numerous times through a variety of mediums.

It's a bit tinfoil hat, but I am disappointed and there's no harm in informing others about these observations and this experience. Mind you - and that's about all I'll add - that the repository stagnated in development for some time, increasing my senses about something being off considerably (browser extension ownership for example get bought frequently by criminals to convert a user base into a cash cow, or worse)

Disclaimer at the end of the article: If I am totally misinterpreting my observations and the Discord hostility without even an attempt at producing counter-arguments or productive and professional openness and communication, at least it serves as a cautionary tale of what could be. In any case, no disrespect or attempt to taint anyone's (opensource) software development ventures and/or their personality is intended. The name of the project or its developers will not be shared, if you can find it, be discrete or this article will be removed. Thank you.

Thanks for your time. Have a great weekend.

Good take - didn't think about it in that context - encryption could happen on a per-file basis perhaps?

That would allow for enough clarity together with a well-written commit message and description, in my opinion.

Ask HN: Repo encryption and decryption for private repositories on GitHub

Hi allConsidering encrypting repository content before pushing and decrypting after cloning a private repository's content.Why? The copilot training debacle and disregard for developer's licensing choice. Shows intent, I don't like it.What's the question? Would it be considered abuse - storage related - if github can not assert what the content is?Any experiences, professional opinions, and/or...

( Read More... | 2 comments | on HN )
Not happening anymore, the current license ecosphere proved to be sufficient.
You don't have to trust the European Commission, discuss the license with your lawyer and network.

Personally, I am annoyed by the length of the license, when you compare it with the MIT license. Might make my own license (altered version of MIT).

Older »