costco
costco on Hacker News
That’s what I did :) It was useful for trying all the different types of Turnstile (managed [with and without action/cdata], non interactive, invisible, under attack, interactive challenge page)
BTW, I did fix all the issues I was able to reproduce when using German and French IP addresses. Please email the address in my profile if you encounter any other problems (and make sure you are using the latest commit).
Mainly Claude and Muse Spark. It seemed happy to help if it was convinced that I controlled the website with the test captchas on it. I’ve also found the more Claude saves memories of working on the project the less conflicted it gets.
Author here. I submitted this a few days ago but seems like it was added to the second chance pool so now it’s on the front page. Anyways, I have received a report from a user that this solver did not work for them with European proxies but did with US proxies… so they may be serving different versions for different regions. I will fix that soon. I’m not at my computer right now but it was working when I tested it a few hours ago (Cloudflare constantly changes things).
My understanding is that there is some sort of rate limiting around PATs per Apple ID (that’s why they require you to be signed in). Also if you want to scale to millions per day you don’t want to have to use headless browsers.
For the last few builds released by Cloudflare, I basically just told an agent “Hi they changed something. Please fix.” And waited for a few hours (mostly spent in Rust compilation) until it came back fixed. Keeping the codebase clean while doing that long term is honestly the harder part.
Yes, that was my goal. I will update this for the next couple of weeks, but probably not forever. I think this is a pretty good foundation for future efforts.
Posted by
costco on Wednesday October 28, 2026 @01:29PM
from the github.com dept.
You know this is easily verifiable right…. I just put 10 random pages into Pangram and they all came back 100% human. And now I feel bad for making an even greater proportion of comments on this thread not about graph theory.
This is a nice spin on the Aaronson oracle:
> In a class I taught at Berkeley, I did an experiment where I wrote a simple little program that would let people type either “f” or “d” and would predict which key they were going to push next. It’s actually very easy to write a program that will make the right prediction about 70% of the time. Most people don’t really know how to type randomly. They’ll have too many alternations and so on. There will be all sorts of patterns, so you just have to build some sort of probabilistic model. Even a very crude one will do well. I couldn’t even beat my own program, knowing exactly how it worked. I challenged people to try this and the program was getting between 70% and 80% prediction rates. Then, we found one student that the program predicted exactly 50% of the time. We asked him what his secret was and he responded that he “just used his free will.”
Posted by
costco on Friday October 02, 2026 @03:59PM
from the clickhouse.com dept.
Posted by
costco on Thursday October 01, 2026 @07:24PM
from the eli.thegreenplace.net dept.
Posted by
costco on Tuesday September 01, 2026 @09:57AM
from the machow.ski dept.
Wow that was quick :) Meh, I feel like comment points have become somewhat untethered to comment quality (at least assuming threads are roughly sorted by comment score). It’s a good heuristic usually but it’s wrong often enough for it to be difficult to rely on.
I want to improve the classifier scores too. There’s some parameters in the loss function I could play around with more when training which basically optimize for more false negatives or false positives. Problems with no ground truth are very frustrating lol (though I suppose dang/tomhow’s manually written warnings could be treated as labels instead of using labels from GPT, but I suspect there’s not enough of them).
That’s very nice. Feel free to integrate if you want :) Just request
https://classify.stylometry.net/violations/49458161 or whatever item ID (as long as it was posted later than a few weeks ago) and it will return the scores for that post/comment and all its children.
Posted by
costco on Wednesday August 26, 2026 @01:00PM
from the show-hn dept.
https://classify.stylometry.net/
I love HN, but lately I have been sick of reading the same dismissive criticisms over and over again. Along with political arguments that have been litigated to death, people's issues with smooth scrolling on blogs, etc. Many of these comments do not get flagged for whatever reason. So I made a service to automatically classify whether comments violate (a modified form of) the HN guidelines...
Posted by
costco on Monday August 17, 2026 @12:04PM
from the show-hn dept.
https://classify.stylometry.net/
I love HN, but lately I have been sick of reading the same dismissive criticisms over and over again. Along with political arguments that have been litigated to death, people's issues with smooth scrolling on blogs, etc. Many of these comments do not get flagged for whatever reason. So I made a service to automatically classify whether comments violate (a a modified form of) the HN...
I'm pretty sure you would get into Berkeley with that profile. Also you can just major in math and get a job as a software engineer anyways. I agree that the system has reached the point of absurdity though. ETH Zurich and KU Leuven have the best solution to this issue in my mind, which is to let everyone in but make the classes ridiculously hard so that 50% leave in the first year.
Very interesting. Hunter S. Thompson described the same technique for learning to write. I'll try it even if it only gets applied to technical blog posts...
If you put important Anthropic blog posts like the Fable announcement or J-Space through Pangram, you get 100% human written. Considering that the overwhelming majority of the code there is written by AI, I think this is an admission that AI writing is slop and AI code is pretty good.
reCAPTCHA is a great success story of security through obscurity because probably less than 100 people have reverse engineered it and much less than that have produced a working solver for it that doesn't require a headless browser. Snapchat would be another good example - almost no one is going to put in the work to understand this [0]. Most companies just half ass it though and accordingly achieve nothing with the obscurity at all besides worse performance.
[0] https://web.archive.org/web/20201128060507/https://hot3eed.g...
I wish we lived in a world where price wasn't the only way to filter out annoying passengers... if this experiment works maybe it will prove you can offer amenities more widely if you set high standards. I want an airline where at the end of the flight you rate the people next to you thumbs up or thumbs down and if someone gets >= 3 thumbs downs they are banned from the airline for 5 years. Eventually ordinary people would be able have the serene experience that only those in first class can presently enjoy as the people who get up thirty times to retrieve items from carry on or eat obnoxiously are removed.
This is an interesting idea... it'd be a fun side project to implement enough of a CSS engine to undo this
This is awesome and very fast especially given all the data displayed!
This wouldn't have helped here but there is a related field of research called hotel recognition. Many of these videos are filmed in hotels so being able to recognize if it was a Mariott or even better a non chain local hotel can be very helpful to investigators. They basically train CNNs that learn to pick up on the bathroom fixtures or kind of bedding used by different hotels. One researcher in particular has done a tone of work on this:
https://scholar.google.com/citations?user=mNoB9SgAAAAJ&hl=enI wonder if you could get the interior of every house from Zillow/realtor websites and then do something like this for every house in the country... Clearview for bedrooms?
Protip: Settings -> Personalization -> Base style and tone -> Efficient largely solves this for ChatGPT