News for hackers. Stuff that matters.

gen6acd60af

>sockpuppet accounts

10+ years of posting doesn't give you a pass to skirt the HN guidelines.

    Please don't post insinuations about astroturfing, shilling, brigading, foreign agents, and the like. It degrades discussion and is usually mistaken. If you're worried about abuse, email [email protected] and we'll look at the data.
Them's the... guidelines.

Please do better.

LM Studio is closed source.

And didn't Ollama independently ship a vision pipeline for some multimodal models months before llama.cpp supported it?

    >Honestly, it’s pretty terrible. 

    >But what a fun project!
Re:Auto-grading decade-old Hacker News discussions with hindsight on Wednesday December 10, 2025 @01:10PM (#46221201)
Commenters of HN:

Your past thoughts have been dredged up and judged.

For each $TOPIC, you have been awarded a grade by GPT-5.1 Thinking.

Your grade is based on OpenAI's aligned worldview and what OpenAI's blob of weights considers Truth in 2025.

Did you think well, netizen?

Are you an Alpha or a Delta-Minus?

Where will the dragnet grading of your online history happen next?

>This submission has been flagged by the Auto-Reviewer v7.0

But we already have this on HN ;-)

[dupe]

Re:Ask HN: Who is hiring? (July 2025) on Thursday July 03, 2025 @05:23AM (#44453191)
Worth pointing out:

That domain has never been mentioned on HN before this, it does not appear in search engine results apart from those indexing that comment, and it has no recorded history of any kind.

Concerning.

It's interesting research, but will Truffle Security use the email addresses for lead gen or marketing purposes, like how they mined users' pingbacks from their XSS Hunter fork for stats?

https://portswigger.net/daily-swig/new-xss-hunter-host-truff...

Re:Building a Personal AI Factory on Wednesday July 02, 2025 @01:57AM (#44440627)
This one?

>Claude's output was thoroughly reviewed by Cloudflare engineers with careful attention paid to security and compliance with standards.

>To emphasize, this is not "vibe coded". Every line was thoroughly reviewed and cross-referenced with relevant RFCs, by security experts with previous experience with those RFCs.

Some time later...

https://github.com/advisories/GHSA-4pc9-x2fx-p7vj / CVE-2025-4143

>The OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp, did not correctly validate that redirect_uri was on the allowed list of redirect URIs for the given client registration.

Re:Show HN: New Ensō – first public beta on Tuesday July 01, 2025 @10:33AM (#44434274)
>Based on the GitHub repo at github.com/rpastuszak/enso

That GitHub repo URL doesn't exist, nor does the user namespace.

Could you please clarify where you are seeing this?

The author's GitHub profile appears to be https://github.com/paprikka.

Sorry, I should have clarified (I would normally agree with you here).

I found a GitHub repo for "ESP32-CSI-Tool" that seems related to Wi-Fi Sensing, but zero references to "FreqSense" in the Wi-Fi/RF context.

The only FreqSense I found is an obscure academic paper on speech recognition that doesn't involve any form of hardware.

Re:Cloudflare to introduce pay-per-crawl for AI bots on Tuesday July 01, 2025 @08:09AM (#44433071)
See also (AFAIK most of these support JSless challenges out of the box): haproxy-protection, go-away, anticrawl
>Check out ESP32-based projects like ESP32-CSI-Tool or the FreqSense library

Interesting, mind sharing links to these?

>Despite being from 2020, this vulnerability persists in 2025 with many airlines still exposing

What is the "vulnerability" by the "airlines" here?

Re:Anticheat Update Tracking on Monday June 30, 2025 @05:49AM (#44421326)
>a classic failure of trust boundary definition - they effectively created a system where client attestation was accepted

Can you elaborate? I'm unsure what a trust boundary definition means in this context and how it relates to attestation.

>easy p2p connectivity

>centralized router(s)

When using Tailscale, your packets may be sent through centralized routers, FYI.

https://tailscale.com/kb/1257/connection-types

Re:Brave creates new TLD on the blockchain on Sunday June 29, 2025 @09:28AM (#44412980)
Well, when you see it alongside these...

* Not X—but Y.

* No X. No Y. Just Z.

* This isn't just about X—it's about Y.

* If this resonates—I'm listening. Because X isn't just a Y. It's a Z.

* Few Words Summary in Bold: One Sentence Restatement.

* [OBVIOUS PLACEHOLDER BLOCK NOT REMOVED FROM TEXT CONTAINING ANY OF THE ABOVE]

Please don't post AI-generated comments to Hacker News. This is a place for curious conversation between humans.

https://news.ycombinator.com/item?id=39528000

https://news.ycombinator.com/item?id=42976756

https://news.ycombinator.com/item?id=40569734

Please don't post AI-generated messages to Hacker News. This is a place for curious conversation between humans.

https://news.ycombinator.com/item?id=39528000

https://news.ycombinator.com/item?id=42976756

https://news.ycombinator.com/item?id=40569734

Please don't post AI-generated messages to Hacker News. This is a place for conversation between humans.

https://news.ycombinator.com/item?id=42976756

https://news.ycombinator.com/item?id=40569734