bstsb

for the first time in a while on HN, i disagree with the characterisation as AI-generated. at most it was drafted with an LLM, but the final output is pretty human to me.

they used the wrong it’s/its, made But. its own one-word sentence, didn’t capitalise HTML, and used “okayy” in parenthesis. all of this isn’t to criticise the writer - i enjoyed it more seeing these little imperfections that make up a blog post

ironically that guide is AI-generated

it’s referring to the page available at /newest - the “new” link leads to it

the Claude-produced website alongside its excessive hyperbole makes me much less likely to believe this “expose”, even if there is an element of truth to it. if you want to call out a company for being “AI slop”, don’t vibe code a website to do so.

to be fair, the fact they show precise revenue data through their public API is interesting: https://polsia.com/api/public/live/dashboard

always trust a vibe-coded website which uses a Discord bot as its backend

(i'm sure there are countless bypasses out there, but please don't use something like this)

hermitcraft's official website features world downloads for S1-10, as well as modded seasons

https://hermitcraft.com/

that is quite funny, tbf. looks like the person who opened is friends with eva, a member of "server scanning inc" [1] so they thought it was worth a shot

[1] https://eva.ac/

much anonymity provided by VPNs is through how many people use their exit nodes, “disguising” your traffic among others. also if you hosted your own VPN it would be trivial for one to find its host from an ASN, and from there subpoena your billing information

> Get Outlook for Mac

this bit made me laugh. was the email drafted in Outlook? was it sent to some sort of forwarding mailbox, or did they just BCC every customer in?

apple didn't "make up" this vulnerability, it was an external team reporting an issue

while there are some tools available for the web UI, like building small React apps or making diagrams, it doesn't have the same loop as Claude Code in terms of iteratively building or fixing

alternate link: https://archive.ph/rsC6e

it’s a fake Cloudflare interstitial, actually using reCAPTCHA. seems like the owner has some sort of vendetta against Cloudflare after the DNS stuff

i would agree if it weren’t for his presence on live TV! at that point it seems too awkward and late to mention something

in other news, Digicert's Secure Site Pro certificates are down to only $5,880.00 yearly for one wildcard domain!

i hate this method of installation:

  iex (curl.exe -L https[://]systalyze.com/utilyze/install.ps1 | Out-String)

it gives you absolutely no insight into what you’re about to run - even worse when the README instructs you to disable Defender on the install directory!

the original creator calls everyone implementing their standard a “scumbag” for having any form of analytics, which seems a bit of an overreaction

i can't think of a single CLI that is possibly collecting analytics for ads

> CLI builds were affected [...]

> Bitwarden’s Chrome extension, MCP server, and other legitimate distributions have not been affected yet.

yeah lots of these are used by AI because they're good. i use Space Grotesk for headings on my current project, rotheme, with Instrument Sans in the body, and my link shortener project uses Geist.

maybe i'm an LLM too

this won't actually change anything right?

> the operators of the site remain unidentified. The judgment [...] orders Anna’s Archive to file a compliance report within ten business days, under penalty of perjury, that includes valid contact information for the site and its managing agents

if you can’t access the page through region blocks:

https://archive.ph/I5cAE

then you have the bot picking Xbox-esque usernames like BluePanda72 instead

this is visually interesting, but crucially it's also actually fun to play.

i managed to kill three enemies before succumbing to my fate

from https://9to5google.com/2026/03/30/android-developer-verifier... -

> Starting in April, Android Developer Verifier will be installed on devices.

so they're rolling out a system app that will call home to check whether any sideloaded apps have been "verified" with the developer's government ID? and this process will happen regardless of whether the user has enabled the "advanced flow" in Developer settings?

i don't love the HTML response for "payment required" endpoints, not least because it just asks the agent to install an arbitrary NPM package for "full wallet connection and payment UI". seems so easy to exploit maliciously - what's to distinguish genuine payment instructions with crypto stealers

looking good! getting red/inverted video flashes on Firefox, M4 Pro. could be an issue with canvas anti-fingerprinting though, not sure its root cause

what’s the license? “do whatever the fuck you want with the data as long as you don’t get caught”? or does that only work for massive corporations

excellent story, it was both interesting and mildly terrifying. to think that one day software could be malleable seems so wrong to me - you would think having deterministic results is important for programming - and yet with "vibe coding" that really seems to be where it's going.

yeah, i agree with your points on age verification. ironically, the main backlash from the Roblox community was that they were even rolling out verification in the first place - not that it didn't go far enough! i'm sure you'll agree it's a tricky problem to solve - if communication is fully banned, then many children will simply move to lesser-moderated platforms.

i'm not a Ruben Sim fan. while his list of "ERPing" accounts is a good idea, and it's amazing to see real games implement blocks on these players, i find his opinions on the furry community strange and a bit obsessive