HNHacker News
TopNewBestAskShowJobs

halapro

552 karma · joined October 22, 2025

submissionscomments
halapro··on Throwing AI-generated walls of text into conversations
The response should be "you're not a good fit for the company. Collect your stuff."
halapro··on We stopped AI bot spam in our GitHub repo using Git's –author flag
> Unfortunately this doesn't scale

Correct. I used to report them, but 3/4 years ago they made it more difficult to report anything because you have to explain what's wrong even when it's very clear.

halapro··on Apple unveils new accessibility features
Are these already available? I regularly read these announcements and years later I still don't know where to find them, or are not actually functional.
halapro··on My domain got abused on GitHub Pages
I'm not scolding, I'm explaining what happened. The post uses the word "abuse" for something that was the expected outcome.

It's like saying "my motorbike was stolen" when you let the key in the ignition for a day in the favelas. What did you expect exactly?

halapro··on My domain got abused on GitHub Pages
You told your NS to forward any request to GitHub, a platform you don't own.

I think this is the expected outcome.

It's good you noticed and shared your findings, but to me this "works as intended"

halapro··on We stopped AI bot spam in our GitHub repo using Git's –author flag
We occasionally get traditional SPAM PRs pointing to their product. In that case it is very useful to clear out title, PR body and reset the commits as well, so none of that appears on the repo.

This is time consuming.

Unfortunately the PR and the PR author will forever be listed there and linking to their product anyway.

halapro··on We stopped AI bot spam in our GitHub repo using Git's –author flag
In the future, when you're looking at past PRs, you'll end up with a list of closed PRs that look legitimate from their titles. You'll waste time opening each one to figure out why it was closed.

This is particularly annoying because PRs also show up in the issue and in the issue list as "this issue has 3 PRs that will close it", when it's all. just. spam.

halapro··on We stopped AI bot spam in our GitHub repo using Git's –author flag
This has two good points:

- add "Pull Request requests" that operate like Friend requests. You can't open PRs until you've been whitelisted (temporarily or not) or are proven to be a good OSS citizen (TBD)

- add a "Burn it with fire" action in new PRs that deletes all comments and PRs opened by the user across the repo, as well as blocking the user.

Organizations already sort of have this, but the action does not delete/close PRs.

halapro··on We stopped AI bot spam in our GitHub repo using Git's –author flag
If the PR exists on my repo, it's already too late.

Either you let me block 6-month old accounts from opening PRs, or you let me delete them.

PRs, draft or not, show up in searches and spammers can continue opening new ones as well as leaving comments on them.

halapro··on We stopped AI bot spam in our GitHub repo using Git's –author flag
This doesn't help with PR spam if that junk still shows up in regular "is:pr" searches. I don’t think unrequested unmerged AI PR spam is useful for compliance, just like deleted comments and issues aren't.
halapro··on We stopped AI bot spam in our GitHub repo using Git's –author flag
They do have ways to limit interactions already, but they work on a whitelist level rather than dynamically based on user "score" (account age, contribution history, etc). If a user gets their comments deleted and blocked from organizations, GitHub should already know it's a spammer.
halapro··on We stopped AI bot spam in our GitHub repo using Git's –author flag
Who do you add as a contributor though? Wannabe-contributors? Then they appear in the list of contributors before you even see if they're capable of producing an acceptable PR.

Your solution would be great if GitHub would also allow me to whitelist specific users, but unfortunately this still won't block "implementation plans" in comments.

halapro··on We stopped AI bot spam in our GitHub repo using Git's –author flag
You can fork and push all you want. The problem is specifically when you show up in my notifications with your junk PR.
halapro··on We stopped AI bot spam in our GitHub repo using Git's –author flag
Possibly the worst idea I've heard this month.

No one, meat or chip, would just set aside $10 "for the opportunity to contribute"

This is "let them eat cake" level of out of touchness.

halapro··on We stopped AI bot spam in our GitHub repo using Git's –author flag
[flagged]
halapro··on Moving away from Tailwind, and learning to structure my CSS
I'm a big hater of Tailwind but also know that most CSS out there is an absolutely clusterf of outdated rules and !important wars. There's no winning when some dude jumps into the codebase and fixes a bug by adding margin-right to "p"

CSS linters never really picked up steam and even with them, what's lintable is quite limited.

halapro··on Googlebook
GooBook? Sounds obvious to me. Or just Bookgle. Lap Goog. aiPad. OogleNote. Infinite possibilities.
halapro··on Venom and Hot Peppers Offer a Key to Killing Resistant Bacteria
The last time I bit into a nice juicy spicy pepper in the morning, I had to crouch in pain for 5 minutes as I felt stabbed right in the heart. The pepper wasn't even spicy like a bonnet, but I had an empty stomach.

So yeah no more peppers without rice for me.

halapro··on Using Claude Code: The unreasonable effectiveness of HTML
I think one of the greatest issues of the last generation of developers is that they never learned about links. They think `div onclick` is equivalent. It pains me that `a` makes up 50% of the HTML acronym but devs don't use it.

I bet that LLMs will actually help generate real links going forward.

halapro··on When the cheap one is the cool one
[flagged]
halapro··on Google Cloud fraud defense, the next evolution of reCAPTCHA
That's news to me https://developer.mozilla.org/en-US/docs/Web/API/Web_Bluetoo...

Websites cannot use Bluetooth anywhere. The QR codes shown in the blog post are not passkey QR codes, which is likely what's confusing you.

halapro··on Google Cloud fraud defense, the next evolution of reCAPTCHA
That's passkey QR codes generated by the browser, it has nothing to do with random QR codes offered by websites.
halapro··on Google Cloud fraud defense, the next evolution of reCAPTCHA
No browser supports Bluetooth.
halapro··on Pomiferous: The most extensive apples (pommes) database
Unless you live in the desert, most likely you can have better local seasonal fruits than apples, you don't need to transport them from across the globe.

It's really quite unfortunate because the overabundance of apples and oranges means that nobody cares about the local seasonal fruits and they risk going extinct.

halapro··on Pomiferous: The most extensive apples (pommes) database
I don't understand why the west is so focused on apples. There are thousands of fruits and people just stick to apples, bananas, oranges and grapes. They're not bad, but, like, it's like going to a restaurant and ordering sausage every time.
halapro··on When the cheap one is the cool one
The Mac Mini starts at $800 now. How many false information will you include in your comments?

https://www.apple.com/shop/buy-mac/mac-mini

halapro··on GitHub CLI now collects pseudoanonymous telemetry
Really? What does checkout and fast-forward means? This is why people don't like git. Basic operations that have arcane naming.
halapro··on When the cheap one is the cool one
> starts at $599, which is over $1000 in 2005 dollars

That's not how money works

> Ridiculous

You can say all you want and you'll come back to this comment in 2028 when the price is set at +100 or +150.

halapro··on Networking changes coming in macOS 27
Ok what do you suggest? Every feature ever written should be supported in perpetuity even if 3 people are using it? Clearly you didn't think this through. Should 2026 computers have a ISA interface as well?

Supporting old hardware and software has a substantial cost that only grows exponentially. Companies exist to print money, not to cater to the smallest niches.

It would be great if they could support things, but I most definitely understand why they don't.

halapro··on Is my blue your blue? (2024)
It's crazy to me that most people don't get it. This is not a "who knows the exact name of this hex color" game, it's "more blue or more green?"

Orange is its own color, but is this hue it 51% red or 51% yellow?

← PreviousPage 2 of 11Next →