News for hackers. Stuff that matters.

costco

That’s what I did :) It was useful for trying all the different types of Turnstile (managed [with and without action/cdata], non interactive, invisible, under attack, interactive challenge page)
BTW, I did fix all the issues I was able to reproduce when using German and French IP addresses. Please email the address in my profile if you encounter any other problems (and make sure you are using the latest commit).
We do https://github.com/chris124567/cfsolve/blob/master/src/http/...

wreq/wreq_util can do it for you for certain popular browsers but there is also support setting custom values in the profile file

Mainly Claude and Muse Spark. It seemed happy to help if it was convinced that I controlled the website with the test captchas on it. I’ve also found the more Claude saves memories of working on the project the less conflicted it gets.
Author here. I submitted this a few days ago but seems like it was added to the second chance pool so now it’s on the front page. Anyways, I have received a report from a user that this solver did not work for them with European proxies but did with US proxies… so they may be serving different versions for different regions. I will fix that soon. I’m not at my computer right now but it was working when I tested it a few hours ago (Cloudflare constantly changes things).
My understanding is that there is some sort of rate limiting around PATs per Apple ID (that’s why they require you to be signed in). Also if you want to scale to millions per day you don’t want to have to use headless browsers.
For the last few builds released by Cloudflare, I basically just told an agent “Hi they changed something. Please fix.” And waited for a few hours (mostly spent in Rust compilation) until it came back fixed. Keeping the codebase clean while doing that long term is honestly the harder part.

Yes, that was my goal. I will update this for the next couple of weeks, but probably not forever. I think this is a pretty good foundation for future efforts.

Re:Start Doing Graph Theory on Wednesday October 28, 2026 @10:38AM (#50274414)
You know this is easily verifiable right…. I just put 10 random pages into Pangram and they all came back 100% human. And now I feel bad for making an even greater proportion of comments on this thread not about graph theory.
Re:Show HN: How Random Are You? on Tuesday October 13, 2026 @02:02PM (#50075947)
This is a nice spin on the Aaronson oracle:

> In a class I taught at Berkeley, I did an experiment where I wrote a simple little program that would let people type either “f” or “d” and would predict which key they were going to push next. It’s actually very easy to write a program that will make the right prediction about 70% of the time. Most people don’t really know how to type randomly. They’ll have too many alternations and so on. There will be all sorts of patterns, so you just have to build some sort of probabilistic model. Even a very crude one will do well. I couldn’t even beat my own program, knowing exactly how it worked. I challenged people to try this and the program was getting between 70% and 80% prediction rates. Then, we found one student that the program predicted exactly 50% of the time. We asked him what his secret was and he responded that he “just used his free will.”

Re:Beam: Reflection's 501B open-weight model on Monday October 05, 2026 @07:51PM (#49972341)
https://github.com/facebookresearch/metaseq/blob/main/projec...

I really enjoyed reading the log book from the training of OPT-175B at Meta… I guess it’s all classified info but it’d be fun to read a blog post about the crazy day to day issues you run into when doing things at this scale :)

Wow that was quick :) Meh, I feel like comment points have become somewhat untethered to comment quality (at least assuming threads are roughly sorted by comment score). It’s a good heuristic usually but it’s wrong often enough for it to be difficult to rely on.

I want to improve the classifier scores too. There’s some parameters in the loss function I could play around with more when training which basically optimize for more false negatives or false positives. Problems with no ground truth are very frustrating lol (though I suppose dang/tomhow’s manually written warnings could be treated as labels instead of using labels from GPT, but I suspect there’s not enough of them).

Re:Nvidia agrees to acquire Hugging Face for $13B on Thursday August 27, 2026 @10:55AM (#49465896)
This is the last time I will engage in self promotion for a while but the above comment and some of its replies are a perfect demonstration of my latest guidelines violations project… https://classify.stylometry.net/violations/49458425?threshol...
That’s very nice. Feel free to integrate if you want :) Just request https://classify.stylometry.net/violations/49458161 or whatever item ID (as long as it was posted later than a few weeks ago) and it will return the scores for that post/comment and all its children.

Show HN: Automatically hide flamebait/shallow/political comments on HN

https://classify.stylometry.net/

I love HN, but lately I have been sick of reading the same dismissive criticisms over and over again. Along with political arguments that have been litigated to death, people's issues with smooth scrolling on blogs, etc. Many of these comments do not get flagged for whatever reason. So I made a service to automatically classify whether comments violate (a modified form of) the HN guidelines...

( Read More... | 4 comments | on HN )

Show HN: Classifier and browser extension to detect rule violating HN comments

https://classify.stylometry.net/

I love HN, but lately I have been sick of reading the same dismissive criticisms over and over again. Along with political arguments that have been litigated to death, people's issues with smooth scrolling on blogs, etc. Many of these comments do not get flagged for whatever reason. So I made a service to automatically classify whether comments violate (a a modified form of) the HN...

( Read More... | 1 comment | 2 points | on HN )
I'm pretty sure you would get into Berkeley with that profile. Also you can just major in math and get a job as a software engineer anyways. I agree that the system has reached the point of absurdity though. ETH Zurich and KU Leuven have the best solution to this issue in my mind, which is to let everyone in but make the classes ridiculously hard so that 50% leave in the first year.
Re:Writing by hand is good for your brain on Thursday July 23, 2026 @11:54AM (#49023677)
Very interesting. Hunter S. Thompson described the same technique for learning to write. I'll try it even if it only gets applied to technical blog posts...
Re:How to stop Claude from saying load-bearing on Tuesday July 14, 2026 @01:31PM (#48910239)
If you put important Anthropic blog posts like the Fable announcement or J-Space through Pangram, you get 100% human written. Considering that the overwhelming majority of the code there is written by AI, I think this is an admission that AI writing is slop and AI code is pretty good.
Re:Security Through Obscurity Is Not Bad on Sunday May 03, 2026 @07:44PM (#48002826)
reCAPTCHA is a great success story of security through obscurity because probably less than 100 people have reverse engineered it and much less than that have produced a working solver for it that doesn't require a headless browser. Snapchat would be another good example - almost no one is going to put in the work to understand this [0]. Most companies just half ass it though and accordingly achieve nothing with the obscurity at all besides worse performance.

[0] https://web.archive.org/web/20201128060507/https://hot3eed.g...

I wish we lived in a world where price wasn't the only way to filter out annoying passengers... if this experiment works maybe it will prove you can offer amenities more widely if you set high standards. I want an airline where at the end of the flight you rate the people next to you thumbs up or thumbs down and if someone gets >= 3 thumbs downs they are banned from the airline for 5 years. Eventually ordinary people would be able have the serene experience that only those in first class can presently enjoy as the people who get up thirty times to retrieve items from carry on or eat obnoxiously are removed.
This is an interesting idea... it'd be a fun side project to implement enough of a CSS engine to undo this
Re:Xweather Live – Interactive global vector weather map on Sunday February 22, 2026 @05:48PM (#47115630)
This is awesome and very fast especially given all the data displayed!
This wouldn't have helped here but there is a related field of research called hotel recognition. Many of these videos are filmed in hotels so being able to recognize if it was a Mariott or even better a non chain local hotel can be very helpful to investigators. They basically train CNNs that learn to pick up on the bathroom fixtures or kind of bedding used by different hotels. One researcher in particular has done a tone of work on this: https://scholar.google.com/citations?user=mNoB9SgAAAAJ&hl=en

I wonder if you could get the interior of every house from Zillow/realtor websites and then do something like this for every house in the country... Clearview for bedrooms?

Re:Why does SSH send 100 packets per keystroke? on Sunday January 25, 2026 @04:23PM (#46758388)
I think he's referring to CPU mitigations: https://en.wikipedia.org/wiki/Transient_execution_CPU_vulner...
Protip: Settings -> Personalization -> Base style and tone -> Efficient largely solves this for ChatGPT

Older »