Hacker Newsnew | past | comments | ask | show | jobs | submit | jeroenhd's commentslogin

Some people who just want to polish their resume will feed any questions/feedback back into the AI that generated their slop. That goes back and forth a few times until the reviewing side learns that the code authors have no idea what they're doing. An LLM can easily pretend to "stand behind its work" if you tell it to.

A company can just fire someone who doesn't know what they're doing, or at least take some kind of measure against their efforts. On a public project, these people can be a death by a thousand cuts.

The best example of this is the automated "CVE" reports you find on bug bounty websites these days.


This is "protect the users from themselves" as-a-feature to prevent scammers from using malware to obscure their scams. Letting the user override the warning would make the entire feature useless.

Using overlay permissions, it's relatively simple to trick someone into transferring money by overlaying a different UI that the malicious app makes the user type or paste into. I believe blocking access to the app while such an overlay is present makes a lot of sense. Trusting apps from Google Play to do this while blocking other install sources would be an obvious mistake, though.

I'd argue this feature shouldn't exist (because of things like the API you mention) but having a user override doesn't make sense here.


That's not really necessary, though I understand why banks are doing this when they're held responsible for their customers' inability to spot fraud before hitting the "transfer my life savings into a Bitcoin wallet" button.

Having a dedicated "banking device" is a good solution for power users, though I'd probably just switch banks if my bank tries to pull that bullshit on me.


It doesn't. I don't know if she's an antisemite, but unless the bank dumps her for being one and an Italian judge agrees that they're allowed to for that reason, this is a clear result of foreign political influence.

Calling the UN special rapporteur for the Palestinian territories a "vile antisemite" sounds a lot like trolling, though.


People investigation Israel for war crimes tend to get sanctioned by the Americans. Because European banks don't have the necessary guardrails to block an individual account from participating in their American-facing banking operations, they have to choose between being sanctioned themselves or kicking out their America-sanctioned customers.

The real solution is for them to fix their shitty systems but I don't a handful of judges, lawyers, and human rights activists are important enough for them to make that investment.


Not to sound cynical, but what's to stop these officials from picking non-multinational regional bank?

This isn't just about being a customer to a multinational bank: this also includes European banks who do business with American banks. For instance, most credit/debit cards in Europe are based on either Mastercard or Visa. All banks I know of will allow you to pay in dollars through online banking.

I don't think there are any European banks that don't communicate with American payment providers in some way by default. It's possible that there are some that trust their feature gates enough to take on these sanctioned people (like government-run banks for those who can't get a normal bank account, i.e. because of a history of fraud and crime), but I don't think these banks will advertise that ability.

Perhaps if she'd take an Iranian, North Korean, or Russian bank account, she might be able to do America-free banking, but that's not very practical outside of Iran, North Korea, or Russia at the moment.


I'm an EU citizen and UK resident. If I were to become one of those officials, my banking situation would become much more complex. One of the defining characteristics of the EU (not that the UK ever cared, even before leaving) is Freedom of Movement, and this is a credible threat to that freedom.

When in the EU the UK was actually one of the countries (if not the country) that made freedom of movement the easiest because, indeed, they did not care. You could move there with zero involvement or knowledge from the authorities.

Yeah, moving here involved basically buying a plane ticket, and, after I got here, booking an appointment to get a National Insurance number (basically equivalent to an American Social Security number). Never occurred to me that moving to any other EU country might be harder than that.

My experience moving to Germany from the UK in 2018 was only one step harder than that from bureaucracy — two appointments, one for social security and the other for an ID card. Not even that I had a much poorer grasp of the German language than I realised was a problem*, as the bureaucracy is mostly bilingual and when it isn't has interpreters.

The only actual hard part was just that the rental market in Berlin has vastly more demand than supply.

* hopefully next month I pass a B1 exam, which tells you how hard it has been for me to get fluent.


> The only actual hard part was just that the rental market in Berlin has vastly more demand than supply.

If you were in London, it's like you never left home!


One of Cambridge's commuter villages. Was a home owner, still am, very useful passive income.

I'm not sure about how London compares, but Berlin has rent controls so the queues for open house viewings around here can go all the way down the apartment staircase and along the street.


> Never occurred to me that moving to any other EU country might be harder than that.

I don't think it is? I moved to Spain from other EU country the same way, basically bought the cheapest one-way plane ticket I could find, spent ~1 month here before deciding I wanted to live here, then got myself the local residence card one morning and that's about it. Everything else just worked by using my passport in the meantime.


No, it is significantly more difficult in other EU countries, yes.

Here in Finland for example the process is actually no different than for a non-EU migrant (same amount of time taken for an unproblematic application, same amount of appointments). You are just much more likely to be accepted but in fact they do still reserve the right to reject people. And it is, probably unintentionally, much harder to exist in Finland as a non-resident as you can't have a bank account, can't use foreign phone numbers for most things and any phone you can get is very limited (can't call many numbers, etc). I couldn't even log into the local eBay for the first 6 months. All the Nordics I would guess are similar.

And people have contested in the comments to you that Spain is not actually so easy as you suggested...

I actually don't know any western country that is as easy to move to as the UK was pre-Brexit. I still think the UK is in fact one of the easier Western countries to move to, especially if you can't find moderately paid work

Countries with a national id system I would guess tend to be more difficult overall though. And the UK famously is not one of those.


It depends on the country. And Spain is not as simple as you say. Even getting the NIE is very difficult due to the foreign police not making enough appointments available. And expensive immigration agencies hoarding those appointments to make money.

Then you need a social security number exist is different than the NIE, you need empradonamiento, you need to register with the health service and you need to set up your tax if you're going to work here (or if you live there more than 180 days of the year)


> Then got myself the local residence card one morning

Well, exactly. Some countries require/required registration and residence card. That did not exist in the UK when it was in the EU, you just showed your passport/ID card when you needed to prove your right to be there (basically once in a blue Moon). Even now EU residents don't have any physical documents.

The National Insurance number @pdpi mentioned is unrelated as everyone has one once they work and an appointment is not always required to get one, and you can actually start working before you get one.

If you work as an employee there is also usually nothing to do regarding tax.


In Barcelona it is impossible to get an appointment for the residence card. There is online booking system, but it never shows any available slots. But then there are few companies that for 50-100 euros can get an appointment.

But then even with appointment one only gets a temporary permit unless one already got a job offer. One gets the permanent card only after starting a business or buying a property or getting a work.

Also to open a permanent bank account one needs to have at least a temporary residence. Otherwise banks can only open a tourist account valid for few months.


"There is online booking system, but it never shows any available slots. But then there are few companies that for 50-100 euros can get an appointment." ^^^ shouldn't complain about this on Hacker News. I wrote my own bot and it took a day or so. The appointment slot came in in 30 minutes thereafter ;)

If you're an EU citizen you by definition have a permanent permit, until either your country of origin or host country leaves the EU. If you are not then woe be you, but that's a separate matter.

That's not actually the case, strictly speaking. Residence in another EU country requires meeting certain criteria even if some countries (like the UK when it was in the EU) do not check or really enforce them. This also means that an EU citizen can be deported from another EU country back to their home country if they don't meet those criteria.

"Permanent residence" is also again different and requires residence under those criteria for at least 5 years.


In theory yes, one can stay in Spain as a citizen of a EU country indefinitely. In practice for anything in Spain you need a tax number. Even to get an Internet connection at home one needs it.

It's not just registering. This assumes you had a job contract lined up or sufficient funds to support yourself.

I had neither when I moved, sold my things, tried to survive, ended up sleeping outside for a few days and I found a job after I moved here, not before. But yeah, there is one or two more appointments in reality, one for the social security and one for registering with your local city government, both a lot easier to get than the residence permit which can be a bit of a hassle unless you work with agencies to get it.

You found a job after you moved but before you could register for all kinds of services I presume. Once you have a job, everything becomes "easy".

Visa and MasterCard, for a start: if a bank issues any kind of commonly accepted debit card to someone who is sanctioned then what is at stake is that bank's ability to continue issuing those cards. Realistically, the bank would be destroyed by being excluded from payment networks and card issuance. So only very little banks that don't interact with anything American (you might manage this with a credit union in the UK, potentially) would be your best bet.

You can't have a credit card which makes your life miserable in the modern world even if you can find a bank : Visa, Master Card, Amex are all American.

Financial sovereignty is one of the reasons India went with its own RuPay (https://www.rupay.co.in/credit-cards) credit cards.

Russia after starting aggressive war against Ukraine quickly deployed own version of payment system. And it has been working much better than Visa/Madtercards with much more straightforward integration with online services and very intuitive apps. Russian people who moved from Russia as refugees or just to escape mobilization or prosecution have found banking system in EU/UK/US are rather unsmooth to put it mildly.

1. "Quickly deployed" is misleading. The work started after 2014 when the idea of closing Russia from the SWIFT system was first discussed. Europeans didn't do that at that time (and they were, that would have been hugely problematic for Russian banks), but made Russia initiate technical work to add in-country backend. In 2022 they finally had to turn it on. But the work was 8 years in the making.

2. When it comes to Mir (Visa/Mastercard) alternatives, it is not that wide-spread.

3. The awesomeness of Russian Fintech (and IT/tech in general) is a separate thing, that has everything to do with Russians' technological ingenuity, not the government/sanctions/patriotism/safety/risk-management/sovereignty/independence.


Many European countries still have their own (single-country) versions of debit cards - EC card/giropay in Germany for instance - and they are often accepted more widely than credit cards.

But international travel becomes painful. (Hence EC cards are co-badged as a fall-back with Visa Debit or Maestro, impossible if you are sanctioned.)


Europe used to have its own system, but it merged with Mastercard in 2002.

These days however the focus has moved to digital payments, and Europe is now backing Wero, which they aim to start rolling out properly in 2026.


I can't find anything about this in the API docs for neither the old SafetyNet nor its replacement (Play Integrity), can you show a source for this being related to SafetyNet? I'd like to see Kore details on this API and the apps it blocks.

It took me seven tries across two years to get Cyberpunk 2077 playing on Linux using either raw install files with or without Lutris/Bottles, GOG Galaxy in a wine env, or whatever Heroic Launcher offers.

I'm glad it mostly works now, but i would've been better off buying it from Valve. The effort Valve put into making games Just Work is unparalleled. The minor UI issues (like context menus getting rendered in place as windows which breaks niche window managers) are nothing compared to the hours required to brute force the right Wine/Proton setup for every game to make it work.

Most of the games that now work in unofficial GOG launchers only work because Valve paid someone to make games run well on Wine, either by directly using Proton or by using one of the many libraries Valve has directly paid for work for.


Did you try lutris?

Yes. One recipe at the time was broken, the other didn't work. At some point the game got updated and the existing tricks and workarounds to get the game running were no longer enough.

With Lutris it just worked.

Not when I tried it the first couple of times. At some point Proton (and then probably Wine?) got updated to fix the bug triggered by one of the game updates months before that and it has worked since.

I'm no stranger to messing with Wine to get Windows executables to work. Whatever the GOG release did different, it just didn't work once the intro logos were gone, even with the same Proton version that worked with the Steam version.


Do raw TCP proxies still get used often? I'd imagine most proxies you'd want to detect are full HTTP proxies and this formula won't detect those.

I suppose it's possible botnets ("residential proxies") may get detected this way if they're using SOCKS to forward requests?

Still, this looks like an interesting signal to add to a system like Anubis to increase the difficulty for suspicious traffic sources.

This does very reliably detect TOR traffic, though you can just download a list of exit nodes if that's what you want.


I think for stealth TCP proxies are more common since you can use your own TLS fingerprints and all of that, with something like an HTTP proxy you'd need to set up your requests to match with the TLS fingerprint that the proxy is using, although I guess the proxy could make the TLS look the same? There are other ways of detecting HTTP proxies like for example comparing with the RTT of websockets or something like that, the idea is that there will always be at least one thing with RTT from the proxy and at least the RTT for one thing from the client that must go trough the proxy, you measure the difference between the two and there you have it.

The most common method of proxying with residential proxies is still CONNECT tunnels and from my tests it catches a resi-proxy about 50% of the time. More with tuning of the score thresholds.

> Dutch law requires at least 90% of the trains to be on time (less than 5 minutes delay

Yes, however, any train delayed more than 30 minutes gets canceled entirely and doesn't get counted in the statistics. The train this article is talking about would not be registered late under Dutch terms (though it probably wouldn't have traveled comically far without stopping).

Not saying Dutch trains are as bad as German trains, but applying the same laws won't fix DB's problems.


Deutsche Bahn has a reputation even inside of Europe. It's not like this in other countries.

Your country would have to be laughably corrupt if it couldn't build out a public transit system that beats DB.


yes the US is laughably corrupt

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: