Hacker Newsnew | past | comments | ask | show | jobs | submit | holuponemoment's commentslogin

Anyone who's dealt with their insane arbitrary account bans knows exactly what's under the hood at Anthropic as a company, a headless chicken pecking at buttons.

I'm a long paying customer, my only usage at all of Claude is for devops IAC and debugging, suddenly out of the blue they decided to ban my account and keep the money. It's unreal.

The response to my appeal said after "lengthy consideration" I had broke the T&C's.


Zoho certainly isn't American but you choose your datacentre region on signup, including US locations.

Think it's a nice option to be able to get EU data protections without actually being a resident.

That said I don't get the objection? There's a high likelihood that the person sending you email is using a US service anyway, Apple, Gmail and Outlook have 90% marketshare between them.


> Alternative subtitle: “What can we learn about zoning from how other places manage it?


Simply charge a fee to submit a report. At 1% of the payment for low bounties it's perfectly valid. Maybe progressively scale that down a bit as the bounty goes up. But still for a $50k bounty you know is correct it's only $500.


No need to make it a percentage ; charge $1 and the spammers will stop extremely quickly, since none of their reports are valid.

But I do think established individual and institutes should have free access ; leave a choice between going through an identification process and paying the fee. If it's such a big problem that you REALLY need to do something ; otherwise just keep marking as spam.


If you charge a fee the motivation for good samaritan reports goes to zero.


That's why they offer cash bounties. You don't need to charge a fee if there is no bounty (aka an actual good Samaritan situation), cuz then there's no incentive to flood it with slop


Another comment in this overall thread indicated that they still receive LLM slop despite not offering bounties. Clout can be as alluring a drug as money.


Curl has dozen of garbage bug reports made using AI where even the author can't point where the bug if, they answer with "the AI said so it's true"


You are adding more incentive to go directly to black market to sell vulnerability.

Also I've heard many times cases when company refused to pay bounty for any reason.

And taxes, how you'll tax it internationally? Sales tax? VAT?


Why charge a fee? All you need is a reputation system where low reputation bounty hunters need a reputable person to vouch for them. If it turns out to be false, both take a hit. If true, the voucher gets to be a co-author and a share in the bounty.


That's just a way to create a toxic environment filled with elitism similar to StackOverflow


gentle reminder that the median salary of a programmer in japan is 60k USD a year. 500 usd is a lot of money (i would not be able to afford it personally).

i suspect 1usd would do the job perfectly fine without cutting out normal non-american people.


Could also be made refundable when the bug report is found to be valid. Although of course the problem then becomes some kid somewhere who is into computers and hacking find something but can’t easily report it because the barrier to entry is too high now. I don’t think there is a good solution unfortunately.


That kid could find a security expert - it’s easy to do - and they could both validate it and post the money. I don’t think it would be hard to find someone with $10k with the right skill set.

Pick someone already rich so the reputational damage from stealing your bounty exceeds the temptation. The repeat speakers list at defcon would be a decent place to start.


The world of AI slop needs a human assertion component. Like. I'm real and stake a permanent reputation on the claim I'm making. An I'm actually human gate.


Nice list, I'd add run0 as the sudo replacement.

My only bugbear with it is that there's no equivalent to the old timeout default you could set (note that doas explicitly said they won't implement this too). The workaround is to run it in `sudo -i` fashion and not put a command afterwards which is reasonable enough even though it worked hard against my muscle memory + copypaste commands when switching over.

> Systemd gets a lot of hate

I'd argue it doesn't and is simply another victim of loud internet minority syndrome.

It's just a generic name at this point, basically all associated with init and service units and none of the other stuff.

https://man.archlinux.org/man/run0.1.en


I was dismayed at having to go from simple clean linear BSD 4.3 / SunOS 4.1.3 era /etc/rc /etc/rc.local init scripts to that tangled rat king abomination of symbolic links and rc.d sub-directories and run levels that is the SysV / Solaris Rube Goldberg device. So people who want to go back to the "good old days" of that AT&T claptrap sound insane to me. Even Slowlaris moved on to SMF.


Oh yes, please add more! I'd love to see what others do because frankly, sometimes it feels like we're talking about forbidden magic or something lol

And honestly, I think the one thing systemd is really missing is... people talking about it. That's realistically the best way to get more documentation and spread all the cool tricks that everyone finds.

  > I'd argue it doesn't 
I definitely agree on loud minority, but they're visible enough that anytime systemd is brought up you can't avoid them. But then again, lots of people have much more passion about their opinions than passion about understanding the thing they opine about.


> run0 as the sudo replacement

Of course. We suffered with sudo for a couple of decades already! Obviously it's wrong and outdated and has to be replaced with whatever LP says is the new norm.


All of your comments mention something existing for a long time, but X11 and ALSA and IPv4 and many more technologies have been used by people for many decades, and yet they still suck and have a replacement available.


X11 sucks today. It was so beautiful and incredibly useful back in the day. I'm not sure that ALSA sucks, though.

cron and sudo definitely don't.


Does it even matter?

Perhaps I am jaded but most if not all people regurgitate about topics without thought or reason along very predictable paths, myself very much included. You can mention a single word covered with a muleta (Spanish bullfighting flag) and the average person will happily run at it and give you a predictable response.


It's like a Pavlovian response in me to respond to anything SQL or C# adjacent.

I see the exact same in others. There are some HN usernames that I have memorized because they show up deterministically in these threads. Some are so determined it seems like a dedicated PR team, but I know better...


I always love checking the comments on articles about Bevy to see how the metaverse client guy is going.


The paths are going to be predictable by necessity. It's not possible for everyone to have a uniquely derived interpretation about most common issues, whether that's standard lightning rod politics but also extending somewhat into tech socio/political issues.


> “I don’t have a last name,” the Moonstruck actress said, confirming that it just says “Cher” on her license.

There's a lot of people on Earth with only one name, it's a common occurrence in Indonesia. So to answer your question: yes I think she has only Cher on her passport.


James Ellingson is a convicted federal criminal charged with numerous crimes related to this case.

Tasked with investigating Silk Road he ended up in jail himself, along with his co-workers.

There's a very good reason none of this stuff ever went to trial, it would be incredibly embarrassing for the agencies involved to see the light of day.


im familiar with the case. ross still attempted to hire a killer multiple times.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: