Hacker Newsnew | past | comments | ask | show | jobs | submit | mtmail's commentslogin

Do you have a link?

See the FAQ on 'Can I post a job ad?'


Looks like the repository URL was marked [dead] for several years, I can't tell why. Best to email the moderator (link in footer).

Big security stories often get republished, one might say reviewed and filtered. For this story I see

opensourcemalware.com - https://news.ycombinator.com/item?id=47449498

stepsecurity.io - https://news.ycombinator.com/item?id=47451081

arstechnica.com - https://news.ycombinator.com/item?id=47464996

and 4 others.


Looking at https://news.ycombinator.com/from?site=github.com/aquasecuri... around 2024 when the dead started, a spambot ring was repeatedly posting it?

( Make need to turn on "showdead"; to see it in the 2024 they have similar posts .. )


Oh that's clever. Use the spambot ring to promote the story so that the story gets marked dead because of that! Instead of hiding the news, use the botnet to promote it and use the system against itself.

I've noticed some HN posts get a higher-than-average number of replies from LLM bots. I've wondered if this has a downranking effect due to the upvote/comment ratio, and whether people might be using bots to do this intentionally. Alternatively it could just be that the bots "like" certain keywords more than others.

Please email links to the bot comments to the mods so they can remove this manipulation and its effects.

What's wrong with the report button?

There is no report button. If you want the mods to make the site less xyz, email them a link to the xyz that you came across and say you want less of xyz, either specifically and/or generally. Let them decide how to respond; that’s not your problem, no need to invest effort in it.

‘flag’, if that’s what you mean, only sends a mathematical algorithm signal, that does not lead to mod attention. I flag posts that are dupes, irrelevant, low-effort, or are hard paywalled without a bypass link. This is often sufficient and is like sweeping cobwebs out of an ignored corner: it’s not worth getting upset about, just grab the broom and sweep it up and move on.

I email mods for issues that I think should be addressed to keep HN a better place than the voting/flag algorithms can solve without human assistance: guidelines violations like high-karma users insulting others, or patterns of behavior observed unflagged over time, or suspicion of voting rings; or technical issues with the xyz.com/subdomain detector that prevent self-linking detection from working, or with the auto-dead-ifier that’s the topic of this post, etc.

tl;dr nope, the mods monitor emails not flags


Maybe it was intentionally compromised all along.

Yea, this looks like a lingering auto-moderation on the Github repo URL prefix due to past spam attempts.

Is the question genuine and serious? I mean you've built a system for agents to spend money ("Show HN: I built a wallet system for AI agents") https://news.ycombinator.com/item?id=47438164"

> Under GDPR Article 20

Why GDPR. Didn't you say you're from Russia?

> DPO request unanswered beyond automated ticket

GDPR allows companies 30 days to answer, or telling you they need more time to answer.

> FTC complaint filed

Why FTC. Didn't you say you're from Russia?

> Filed formal legal appeal (7 pages)

I'm guessing the pages were largely AI generated?

> This is, de facto, theft of intellectual property.

At this point I'm laughing and wonder which AI lawyer gave the confidence to suggest that.

> No export. No backup.

Having no backups is hardly the provider's fault.

> Project migrated to GitLab

That sounds like you have the code at least and can recreate the data.


> Why GDPR. Didn't you say you're from Russia?

GitHub is a US company that processes data of EU residents. They're subject to GDPR. I've been in cybersecurity since I was 14 — data protection laws aren't new to me.

Additionally, California BPC § 17200 applies since GitHub is California-based.

> GDPR allows companies 30 days to answer

Correct. I filed the DPO request on March 17. The 30-day window hasn't expired. I'm sharing this now because the permanent ban came 70 minutes after my legal appeal with no review of the actual arguments.

> Why FTC. Didn't you say you're from Russia?

FTC accepts complaints from anyone regarding US companies. GitHub is US-based. Their business practices affect international users.

> I'm guessing the pages were largely AI generated?

I used AI to help with English phrasing — it's not my first language. The legal framework and arguments are mine. I've been interested in cybersecurity, privacy, and cryptography since I was 14. I considered getting into cypherpunk circles at one point. GDPR Article 20 isn't exactly obscure knowledge for someone in this field.

> theft of intellectual property

Fair point on the wording. More accurately: GitHub is refusing to provide data portability as required by GDPR Article 20. I retain copyright but am being denied access without due process.

> Having no backups is hardly the provider's fault

You're right I should have had backups. But GDPR Article 20 grants an unconditional right to data portability. "You should have backed up" doesn't exempt a company from legal obligations.

> That sounds like you have the code at least

I had a local copy of the VPN client (rsquad) from March 2. I lost: - Other repositories (hpp, node-filter, loshad-scoc, zhopa-bobra) - All issues and pull requests - Wiki content - Release packages - Account settings, SSH keys, GPG keys


> GitHub is a US company that processes data of EU residents. They're subject to GDPR.

You aren't located in the union in any way.

> I've been in cybersecurity since I was 14 — data protection laws aren't new to me.

Great, then you should be familiar with Article 3 of the GDPR:

> This Regulation applies to the processing of personal data of data subjects who are in the Union [...]

> This Regulation applies to the processing of personal data of data subjects who are in the Union by a controller or processor not established in the Union [...]

And Article 20 does actually have several conditions, it's not unconditional.

...

> Additionally, California BPC § 17200 applies since GitHub is California-based.

What does this have to do with "unfair competition"?


It's a team effort, you flag some, I flag some.

unfortunately flag button is somewhat hidden on hn so most ppl dont go through that extra step for this to be effective

Maybe that’s proof-of-work?

And probably a feature because downvoting is usually enough.


If more and more Ask HN just promote new services I loose motivation to answer.

The comment belongs to this thread https://news.ycombinator.com/item?id=47401809

Thanks.

Add an entry to the monthly who-wants-to-be-hired https://news.ycombinator.com/submitted?id=whoishiring


lovable.app domain conveys the author isn't willing to spend money. There is no indication, none, who the money goes to. That raises doubts about 'permanent forever'. The error messages are in French.


The "live feed" of purchases is a hardcoded list in index.js. All fake?


Good catches, thank you for the feedback.

1. Domain: You're right, I'm adding a custom domain this week. The site runs on Supabase so pixel data is permanently stored in a real database.

2. Live feed: The initial seed data was simulated to show activity, but real purchases are stored in Supabase and appear instantly. Fair criticism — I'll make this clearer.

Error messages in French: I'm based in Quebec, Canada — fixing the locale now.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: