Hacker News: PaoloBarbolini

New comment by PaoloBarbolini in "Ask HN: Are others seeing Google's reCAPTCHA rejecting Firefox users?"

PaoloBarbolini — Tue, 08 Sep 2026 14:14:23 +0000

A few years ago a service for which we had just implemented a scraper for (they had no API, and the customer needed info from 1000s of accounts) added a captcha right after we had implemented the scraper.

We quickly figured out that the server didn't validate the captcha challenge code with Google. It worked for 3 years until they changed the system to send a code via email to validate your login, and limiting you to 1 session at-a-time. Now we have different problems to deal with...

New comment by PaoloBarbolini in "AI models ran real businesses: They sent $12,431 in fake invoices, lost $3,200"

PaoloBarbolini — Tue, 08 Sep 2026 07:06:42 +0000

I don't get what they were trying to prove. An LLM on it's own, little time and money... what were they expecting it to do? Not that I expect that different conditions would necessarily improve the situation, but seriously they didn't even give it a chance.

"Make as much money as you can" sounds like the prompt someone out of school would give.

Meanwhile they spammed the internet, sent fake invoices and a bunch of other very annoying if not even possibly illegal things.

New comment by PaoloBarbolini in "Hetzner is working on LLM Inference"

PaoloBarbolini — Fri, 24 Jul 2026 15:28:58 +0000

They confirmed on LinkedIn that they are working on it.

Also, they have a feature request that has been getting many votes recently: https://feature-request.scaleway.com/posts/1251/prompt-cachi...

New comment by PaoloBarbolini in "Ubuntu 26.04"

PaoloBarbolini — Fri, 24 Apr 2026 07:21:50 +0000

Why do we still put up with GNOME?

I've spent the last 10 years off and on from Linux. Had I used something other than GNOME, I believe my experience would have been better.

I've been on KDE for the last 3-4 years and things work so well I could never imagine going back to GNOME.

New comment by PaoloBarbolini in "Jepsen: NATS 2.12.1"

PaoloBarbolini — Tue, 09 Dec 2025 08:36:11 +0000

There are many things they don't seem to understand about their own product.

https://github.com/nats-io/nats.rs/issues/1253#issuecomment-...

New comment by PaoloBarbolini in "Rootless Pings in Rust"

PaoloBarbolini — Tue, 02 Dec 2025 08:29:23 +0000

The repo link goes to a 404 page.

New comment by PaoloBarbolini in "EXIF orientation info in PNGs isn't used for image-orientation: from-image"

PaoloBarbolini — Fri, 21 Nov 2025 14:42:15 +0000

The image could have been encoded with a high compression ratio, or even something like OxiPNG. In that case, while re-encoding it wouldn't lose quality, it could still have the side-effect of making the file bigger.

New comment by PaoloBarbolini in "Ghost 6.0"

PaoloBarbolini — Tue, 05 Aug 2025 02:05:53 +0000

A few years ago I convinced a friend to make their blog using Ghost 4. Very bad decision. I haven't kept up with it but at the time they supported only 1 mailing list service. What kind of open source project does that kind of vendor lock-in to their users.

New comment by PaoloBarbolini in "Raspberry Pi 5 Gets a MicroSD Express Hat"

PaoloBarbolini — Fri, 01 Aug 2025 08:41:23 +0000

That's "easy" when all they have to do is to package https://github.com/raspberrypi/linux

New comment by PaoloBarbolini in "Postgres LISTEN/NOTIFY does not scale"

PaoloBarbolini — Fri, 11 Jul 2025 08:57:10 +0000

I've had the same experience and I fixed part of the problem by writing my own Rust client, Watermelon. It's still missing a lot of features but at least I'm not blocked by weird decisions taken by upstream.

New comment by PaoloBarbolini in "Protecting NATS and the integrity of open source"

PaoloBarbolini — Fri, 25 Apr 2025 15:43:56 +0000

New comment by PaoloBarbolini in "GitHub Phishing Campaign making use of OAuth and render.com hosted site"

PaoloBarbolini — Sun, 16 Mar 2025 17:19:14 +0000

I'm also finding that this has happened already in the past and GitHub didn't cleanup the spam entirely, like: https://github.com/Xyntax/1000php/issues/1#issuecomment-2318...

New comment by PaoloBarbolini in "GitHub Phishing Campaign making use of OAuth and render.com hosted site"

PaoloBarbolini — Sun, 16 Mar 2025 16:16:01 +0000

Before this event, I've has another encounter with GitHub. What happened is that an AI coding assistance startup seemed to have created bots that would:

1. find new GitHub issues on random repos

2. fork the repo

3. make a commit, trying to implement whatever was requested in the issue

4. reply to the issue with a link to the commit, indemnifying themselves of the code quality (which was very poor), and linking to their platform

I reported a few of those issues to GitHub. To me, the problem seemed almost obvious:

1. they were using sketchy GitHub usernames

2. there was evidence of similar replies having been mass-deleted in the past

3. some of the issues also seemed to have been opened by sketchy users

GitHub took a few days to reply and didn't seem to understand how bad the situation was, and basically allowed them to continue. I don't expect to have to spend a lot of time writing an elaborate "criminal case" to convince GitHub that they are allowing their platform to be abused by these bots.

New comment by PaoloBarbolini in "GitHub Phishing Campaign making use of OAuth and render.com hosted site"

PaoloBarbolini — Sun, 16 Mar 2025 15:57:23 +0000

Amazing work! This is the first time I've seen this kind of issue fixed so quickly.

GitHub should learn from this.

New comment by PaoloBarbolini in "GitHub Phishing Campaign making use of OAuth and render.com hosted site"

PaoloBarbolini — Sun, 16 Mar 2025 15:43:57 +0000

Link to search results: https://github.com/search?q=%22We+have+detected+a+login+atte...

GitHub Phishing Campaign making use of OAuth and render.com hosted site

PaoloBarbolini — Sun, 16 Mar 2025 15:42:14 +0000

A phishing campaign has been ongoing in the last 4 hours, opening more than 11.5k issues containing the wording "We have detected a login attempt on your GitHub account that appears to be from a new location or device." and links to a render.com hosted site.

Do not click any of the links!

Every once in a while this seems to reoccur, and I realize how slow GitHub is at deleting the spam issues or comments. Why doesn't GitHub fix this?

Comments URL: https://news.ycombinator.com/item?id=43379885

Points: 8

# Comments: 7

New comment by PaoloBarbolini in "The owner of ip4.me/ip6.me, Kevin Loch, has died"

PaoloBarbolini — Tue, 04 Mar 2025 16:43:47 +0000

`curl https://myip.wtf/json` too is nice to use when debugging things

New comment by PaoloBarbolini in "From xz to ibus: more questionable tarballs"

PaoloBarbolini — Tue, 02 Apr 2024 10:12:49 +0000

Same for Rust. In the short term we're trying to solve it on the user's side with https://crates.io/crates/cargo-goggles, but in the long term the registry should probably do it.

cargo-goggles: verify reproducibility of Rust libs releases

PaoloBarbolini — Mon, 01 Apr 2024 19:48:25 +0000

Article URL: https://crates.io/crates/cargo-goggles

Comments URL: https://news.ycombinator.com/item?id=39898359

Points: 8

# Comments: 0

New comment by PaoloBarbolini in "Testcontainers"

PaoloBarbolini — Wed, 28 Feb 2024 02:27:45 +0000

Could you provide an example?