<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: luckylion</title><link>https://news.ycombinator.com/user?id=luckylion</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Thu, 22 Oct 2026 03:51:15 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=luckylion" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by luckylion in "Upcoming critical PHP security release (CVE-2026-109618 / -109619)"]]></title><description><![CDATA[
<p>Honestly, leaving everyone vulnerable and sitting on the patch while the exploits are out in the wild (i.e. no more use of delayed release) is hard to stomach.<p>A lot of people are going to do the math on migrating. Bugs happen everywhere. Leaving the community out in the cold and only supplying the corporate sponsors doesn't.</p>
]]></description><pubDate>Wed, 21 Oct 2026 12:02:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=50179483</link><dc:creator>luckylion</dc:creator><comments>https://news.ycombinator.com/item?id=50179483</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50179483</guid></item><item><title><![CDATA[New comment by luckylion in "DeepSeek search and fetch – $0.75 per 1000 successful requests"]]></title><description><![CDATA[
<p>Anti-fingerprinting is mostly there to be able to use the same browser across many requests, I assume?<p>I found that a slightly-modified firefox for more stealthy remote-control works fine and gets a pass on all automatic captchas I tested. but I don't do it at scale, I just wanted something to automate a particularly stupid website that I have to use.<p>Would love to see if my browser is detected -- any recommendations for tests to run?</p>
]]></description><pubDate>Sun, 18 Oct 2026 11:29:51 +0000</pubDate><link>https://news.ycombinator.com/item?id=50140085</link><dc:creator>luckylion</dc:creator><comments>https://news.ycombinator.com/item?id=50140085</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50140085</guid></item><item><title><![CDATA[New comment by luckylion in "The cost of getting a job today"]]></title><description><![CDATA[
<p>"Software engineers are poor and can't afford $20/month".<p>linkedin-drivel.</p>
]]></description><pubDate>Thu, 15 Oct 2026 10:00:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=50101471</link><dc:creator>luckylion</dc:creator><comments>https://news.ycombinator.com/item?id=50101471</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50101471</guid></item><item><title><![CDATA[New comment by luckylion in "Bot traffic from Yandex"]]></title><description><![CDATA[
<p>I've reported high-volume exploit scanners multiple times, and when expiring blocks a week later, they typically would show up & resumt with the same IP at some point.<p>Maybe they'd care if the account was using a stolen credit card and there was a chance they wouldn't get their money, but they definitely do not care otherwise for normal people like me. I'm sure that'd be different if it's a multinational or a country-level government body is reporting something, but I can't get those to do my bidding.</p>
]]></description><pubDate>Sun, 11 Oct 2026 13:24:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=50043078</link><dc:creator>luckylion</dc:creator><comments>https://news.ycombinator.com/item?id=50043078</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50043078</guid></item><item><title><![CDATA[New comment by luckylion in "An update on Wayback Machine access"]]></title><description><![CDATA[
<p>What sites would they be targeting? Generic "just give me anything"? Whenever I check regular sites on IA, the coverage is spotty -- they'll have the homepage and a few important pages, but it quickly fizzles out.<p>Very understandable, you can't store all 15000 pages of any random website and update them etc etc, but that makes them pretty useless for indirect scraping because you usually don't want a tiny taste, you want everything.</p>
]]></description><pubDate>Tue, 15 Sep 2026 18:44:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=49716933</link><dc:creator>luckylion</dc:creator><comments>https://news.ycombinator.com/item?id=49716933</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49716933</guid></item><item><title><![CDATA[New comment by luckylion in "Why is Google still serving dodgy ads?"]]></title><description><![CDATA[
<p>Does section 230 shield them from ads they select for display? Ads are not randomly hosted by random people and if you visit a random page those people uploaded, you see them. Google selects the ads they want to show you on search results, before youtube videos, or on third party websites. There's no "we don't know what that might be" going on at all -- they are running sophisticated algorithms to optimize the impact of those ads. Is that still be covered under section 230?</p>
]]></description><pubDate>Sun, 13 Sep 2026 20:01:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=49688072</link><dc:creator>luckylion</dc:creator><comments>https://news.ycombinator.com/item?id=49688072</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49688072</guid></item><item><title><![CDATA[New comment by luckylion in "Muse Spark 1.3"]]></title><description><![CDATA[
<p>Are not all corporations extractive by nature? Google clearly is.<p>That's obviously not the issue with that -- you don't see those comments on Google's AI announcements.</p>
]]></description><pubDate>Wed, 02 Sep 2026 20:58:00 +0000</pubDate><link>https://news.ycombinator.com/item?id=49542461</link><dc:creator>luckylion</dc:creator><comments>https://news.ycombinator.com/item?id=49542461</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49542461</guid></item><item><title><![CDATA[New comment by luckylion in "Luanti removed from Google Play due to baseless AI copyright notice"]]></title><description><![CDATA[
<p>In this case, you know who claimed it. In most cases, you don't, because Google does not verify identity.<p>It's currently the rage in blackhat SEO: just say you're John Doe from Doeville and competitorsite.com is infringing on your copyright. Google will remove that specific URL from the SERPs and there's a 50/50 chance whether the target gets a notification from google or not.<p>If they do, they can counter claim directly and it takes 12-48 hours to be reinstated.<p>If they don't, they have to figure out what's going on by using the Lumen Database (the only way to receive that information because Google is horribly bad at basic legal matters) and finding the notice, which will contain the exact URL (because fun fact: the claim and counter-claim are case-sensitive, the removal-from-serp is case-insensitive), and then do manual counter-claim, and it takes anywhere from 3 to 30 days.<p>During that time, your competitor will just be gone from the SERPs.</p>
]]></description><pubDate>Fri, 28 Aug 2026 19:21:45 +0000</pubDate><link>https://news.ycombinator.com/item?id=49483104</link><dc:creator>luckylion</dc:creator><comments>https://news.ycombinator.com/item?id=49483104</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49483104</guid></item><item><title><![CDATA[New comment by luckylion in "I Remain a Skeptic"]]></title><description><![CDATA[
<p>> Where is the big browser, operating system, or other piece of work that has been able to quickly compete with the existing entries in the market due to LLMs?<p>Why would it "quickly compete"? What if AI gives you a 100x leverage but not a 100000x leverage?<p>With the 100000x leverage, you could spin up a full browser and compete, but not with the 100x. With 100x, you could use fewer people or do it in less time, but the amount of effort that goes into browsers still doesn't make it "an afternoon for one person".<p>I think it's undeniable that an excavator is ridiculously more powerful than a human at digging holes. Let's say it's 100x more efficient.<p>But if you had 1000 people work on a big hole every day for 5 years, the excavator wouldn't manage to do the same in a day, but it would allow you to do the same with 10 people and 10 excavators in 5 years, or with 50 people and 50 excavators in one year.<p>I don't think it scales linearly the more complexity grows, but "it hasn't been done, therefore it isn't possible" seems wrong. Maybe the big labs could build a browser, but they'd much rather spend the attention of 50 engineers on something else.</p>
]]></description><pubDate>Sun, 16 Aug 2026 11:05:59 +0000</pubDate><link>https://news.ycombinator.com/item?id=49318908</link><dc:creator>luckylion</dc:creator><comments>https://news.ycombinator.com/item?id=49318908</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49318908</guid></item><item><title><![CDATA[New comment by luckylion in "AI doesn't generate working products, that's still your job"]]></title><description><![CDATA[
<p>I found that agents help, even if you don't parallelize. Having one agent control another and verify its results against rules you set has worked well for me because the controlling agent has no incentive to cut corners, and the implementor might, but it is being controlled.<p>My usage might be much simpler than what you do, but it went from "but I gave a list of things to do, you only did 5 of them" - "okay, here are the other 7, oh btw, I skipped the verification rule because nobody has time for that" to good compliance, the orchestrator starts the sub agents, tells them exactly one thing to do, and makes sure they've done it afterwards.<p>makes sense on planning as well, I think. spend your tokens on the best model to explore the problem and design the solution, but the implementation and testing/verification cycles don't need the strongest model you can get.</p>
]]></description><pubDate>Sat, 01 Aug 2026 13:41:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=49134359</link><dc:creator>luckylion</dc:creator><comments>https://news.ycombinator.com/item?id=49134359</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49134359</guid></item><item><title><![CDATA[New comment by luckylion in "My current strategy is to not read any of the code written by my agents"]]></title><description><![CDATA[
<p>"Do not use react. Do not use tailwind. We will not deploy on vercel."<p>and suddenly things work again, it's magic!</p>
]]></description><pubDate>Mon, 27 Jul 2026 22:20:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=49076201</link><dc:creator>luckylion</dc:creator><comments>https://news.ycombinator.com/item?id=49076201</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49076201</guid></item><item><title><![CDATA[New comment by luckylion in "HackerRank open sourced its ATS. My resume scored 90/100. Oh wait 74. No – 88"]]></title><description><![CDATA[
<p>I'm on the other side, and my main tip (at least if there's people like me!) is: avoid the usual AI signs.<p>For one role we got ~70 applications and all CVs looked obviously AI-written. I don't know whether the people did actually do any of the things mentioned and I don't have the time to find out, so the AI-written CVs are a discard-signal for me. (Either those people delegated a very important task to AI and didn't even bother to check, or they are bad using AI and don't know -- I want neither)<p>Any CVs that signal they were actually written by a person I will actually look at.</p>
]]></description><pubDate>Mon, 29 Jun 2026 09:31:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=48716933</link><dc:creator>luckylion</dc:creator><comments>https://news.ycombinator.com/item?id=48716933</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48716933</guid></item><item><title><![CDATA[New comment by luckylion in "A US military exercise to launch a satellite on short notice"]]></title><description><![CDATA[
<p>> I personally spend hundreds of dollars a month on war.<p>Or, put another way, you spend hundreds of dollars a month on not having to learn russian and live as putin's peasant.<p>Seems like a good deal to me.</p>
]]></description><pubDate>Fri, 26 Jun 2026 18:34:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=48690253</link><dc:creator>luckylion</dc:creator><comments>https://news.ycombinator.com/item?id=48690253</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48690253</guid></item><item><title><![CDATA[New comment by luckylion in "CTOs Agree: Cognitive Debt Is the New Technical Debt"]]></title><description><![CDATA[
<p>Moats for software/web companies that are entirely "we've built it, it would be too expensive for you to replicate it" are getting much weaker. It's now quick to produce something that at least looks close to an existing product. You can't clone the backend, the know-how to handle some weird interactions etc, but still, you can get fairly far mimicking the frontend, and LLMs can write you the fancy marketing buzzwords too.<p>I think the part you can't easily clone will turn out to be the institutional processes that allow you to run at scale, onboard new people, deal with common requests that AI cannot on its own (e.g. legal compliance), the relationships you have with partners and vendors, the legal setups you have in place etc.<p>I'd assume that plenty of developers feel capable to building a better jira, and some try, and few/none succeed despite atlassian doing everything in their power to drive clients away, because cloning the project isn't the hard part with that type of product.</p>
]]></description><pubDate>Sun, 21 Jun 2026 12:13:18 +0000</pubDate><link>https://news.ycombinator.com/item?id=48618239</link><dc:creator>luckylion</dc:creator><comments>https://news.ycombinator.com/item?id=48618239</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48618239</guid></item><item><title><![CDATA[New comment by luckylion in "Building an HTML-first site doubled our users overnight"]]></title><description><![CDATA[
<p>Are you sympathetic to a doctor who specialized in surgery and now always recommends surgery, even for a common cold? Or would you say they are in the wrong job, if they are anywhere but surgery?</p>
]]></description><pubDate>Wed, 10 Jun 2026 16:48:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=48479073</link><dc:creator>luckylion</dc:creator><comments>https://news.ycombinator.com/item?id=48479073</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48479073</guid></item><item><title><![CDATA[New comment by luckylion in "Cloudflare Turnstile requiring fingerprintable WebGL"]]></title><description><![CDATA[
<p>Tie them to the buyer's identity, offer at-value buy-backs until X weeks before event, disallow resale.</p>
]]></description><pubDate>Sun, 31 May 2026 15:03:56 +0000</pubDate><link>https://news.ycombinator.com/item?id=48346242</link><dc:creator>luckylion</dc:creator><comments>https://news.ycombinator.com/item?id=48346242</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48346242</guid></item><item><title><![CDATA[New comment by luckylion in "The Website Specification"]]></title><description><![CDATA[
<p>Aren't you leaking that there's an account with that email that has a non-password auth method if you treat them differently?</p>
]]></description><pubDate>Sun, 31 May 2026 14:14:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=48345849</link><dc:creator>luckylion</dc:creator><comments>https://news.ycombinator.com/item?id=48345849</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48345849</guid></item><item><title><![CDATA[New comment by luckylion in "You can just say it"]]></title><description><![CDATA[
<p>Of all the times someone used AI and did not disclose it, I've never found it to be a desire to be better, it was always a desire to do 5 minutes of work and still have a result that looks like you spent multiple hours. Except it only looks that way at a glance, it's usually bad because that type of person does not care, so their prompts are bad, and they don't care to even read the results.<p>In my experience, the people who actually wanted to improve the presentation of their messages are upfront about it and clearly say they're using AI to organize their thoughts or polish their english.</p>
]]></description><pubDate>Sat, 30 May 2026 08:11:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=48333873</link><dc:creator>luckylion</dc:creator><comments>https://news.ycombinator.com/item?id=48333873</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48333873</guid></item><item><title><![CDATA[New comment by luckylion in "YouTube to automatically label AI-generated videos"]]></title><description><![CDATA[
<p>_before_? youtube is like the top 1000 creators / influencers / celebrities, 5% actual videos, and the rest is slop of various types for me.<p>The search is entirely gone and will straight up not list regular content that was made by humans, but it will absolutely surface the cheap AI-voices that can't say HVAC fluently.<p>Makes sense for youtube, too. For the average person, that seems to be enough, the ads are the same value, and people who dislike that probably have a large overlap with people who use adblockers and don't impulsively spend money on the latest browser-game, miracle cure for cancer, or financial advice from random scammers.</p>
]]></description><pubDate>Wed, 27 May 2026 20:23:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=48300086</link><dc:creator>luckylion</dc:creator><comments>https://news.ycombinator.com/item?id=48300086</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48300086</guid></item><item><title><![CDATA[New comment by luckylion in "I'm Tired of Talking to AI"]]></title><description><![CDATA[
<p>> The right approach would be to say: I do not know. Let me discuss / research with my colleagues and get back to you.<p>I suppose that would be very close to "you've come to the experts for advice and I probably shouldn't be here because I'm not one of them", which nobody wants to admit.<p>For many, an honest look at themselves would end with "I don't contribute anything". They have the opposite of impostor syndrome - they don't belong, but they feel like they should, and AI helps them pretend.</p>
]]></description><pubDate>Wed, 27 May 2026 17:56:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=48297927</link><dc:creator>luckylion</dc:creator><comments>https://news.ycombinator.com/item?id=48297927</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48297927</guid></item></channel></rss>