Hacker Newsnew | past | comments | ask | show | jobs | submit | idk1's commentslogin

This is going to sound strange, but I simply must decorate a few rooms. I seem to be so obsessive about selecting exactly the right thing in there in case it's wrong. I can't seem to select anything at all. If I carry on like this, I'm going to go another 10 years living in essentially an empty room with a bed in it.


Hey there Boris from the Claude Code team! Thanks for these tips! Love Claude Code, absolutely one of the best pieces of software that has ever existed. What I would absolutely love is if the Claude documentation had examples of these because I see time and time again people saying what to do in the case you tell us to update the Claude MD with things that it gets wrong repeatedly but it's very rare to have examples just three or four examples of something gets got wrong, and then how you fixed it would be immensely helpful.


There really should be a law around being able to access and review locked accounts. I've seen so many cases of people just losing their digital lives because of an automated system.


Regular old contract law will handle this fine. State a claim to a court and let Apple respond to it. It's not beyond the reach of the author to do this.


Because I'm apparently a billion years old, I still use Sublime Text and just text editor. If I do switch, it will be to this. However, is it as responsive? Do file changes just appear if I change them elsewhere in like terminal?


I have to say, i love this. The name is fantastic and the whole concept. It's got a very Game of Life or Monopoly feel where you've just taken the fundamentals of something in society and turned it into a game instead of adding an additional story on top. I really like it.

My one comment would be, I think you need to change the branding a little bit. It's a bit too close to Magic the Gathering, and this feels like its own IP and can stand on its own legs. So I think you need to just adjust the cards enough so they don't instantly read as a Magic the Gathering card.


If the author is reading this, then I feel like it would be great if you could potentially open source your skills and Claude MD in a redacted way so these are actually viewable. The problem with a lot of these tutorials is, if I can call it a tutorial, is that we never get to see the actual skills or the Claude MD themselves, just a description of it.


This is off topic, but can anyone tell me what the genre of music is to the video on this?


I'm not interested in doing this at all, but how does a person take over a subreddit? That sounds like a very difficult thing to do.


"Hi I noticed you weren't that online as recently as you were are you ok?"

Wow that must be a lot of work

Wow I feel for you, friend

Yea id be happy to help out from time to time.

--- But needs to happen with other things.

Quite often seen in GitHub where an attacker can contribute to build trust. With Reddit, mini modding, regular submissions, good comments etc

Defense includes not being shamed or pressured when life seems more important.


The simplest thing is probably just to ask for it. I'm sure if you went now and asked to be moderator for a hundred different mid-sized subs, you'd get yes from a few. If you "seem trustworthy", probably more than a few.


This was exactly the playbook that led to the xz backdoor.

Just the quotes:

https://news.ycombinator.com/item?id=39909905

Very long page but a lot more in depth. Search for “Jigar Kumar pressured Lasse Collin”

https://securelist.com/xz-backdoor-story-part-2-social-engin...

And an overview:

https://en.wikipedia.org/wiki/XZ_Utils_backdoor


Yes, I had that in mind too.

Its worth any maintainer to be familiar with these methods to build up defences. With a few sock puppet accounts a single person could do it on their spare time. A nation state or criminal full time enterprise could do several attacks.

It's scary and immoral but I find it fascinating too. Like the dark side of the how to win friends books.

Security.


But can any mod remove other mods? How does that work in reddit?


Seniority. Older mods can remove younger mods.


So just try to buy or steal the most senior mod's account and then you have the mod for yourself? Ouch.


Strangely not mentioned much in here is how these accounts are up for sale.

It's definitely never mentioned on reddit because simply saying one of the websites in an offhand comment gets you a sitewide ban and your comment deleted.


Mods aren't set in stone, they tend to be active for a few years and then give up. Once that happens and you notice the current mods not posting anything for a period of time, you can simply file a request to side-wide admins to take over that sub, as giving it to anyone else is better than leaving it completely unmoderated.


it's surprising that this feature remains relatively unknown. the article doesn't seem to be directly aware of it. I recently requested a fairly important subreddit which had been taken over by mods of a competing to sub and locked down to prevent competition, and they gave it to me immediately


https://www.reddit.com/r/redditrequest/ - see the sidebar.

If the sub has an inactive or no mod, its as simple as making a post.


Probably in the same way as Jia Tan took over the xz.



Apart from getting the existing mod team to hand over to you, you can also petition to the reddit admins. For example, there is a process to replace inactive mods and this could be used to take control of a subreddit with existing users.


People offer money to buy your reddit handle, assuming you are a mod of a reddit they want to control.


On a side note, does anybody have a good cookie consent blocker, pop-up blocker for Firefox? I uninstalled "I don't care about cookies" since he got taken over by a mysterious third party.


I use Consent-O-Matic. It doesn't catch everything but it does work on some sites. Basically it just automatically goes for the "Reject" option if that's provided in a reasonably standard way. Lots of sites where that doesn't work, obviously. But a few where it does.

Probably a good benchmark if you are developing standard cookie consent dialogs is whether they work with this.


I'm using "EasyList/uBO – Cookie Notices" in my uBlock Origin in the Filter lists. It works well enough for blocking cookie pop-ups.


We're working on this feature now! Privacy Badger will automatically opt you out of common cookie consent banners, when opting out is an option.


Not an exhaustive solution, but these are often loaded with third party requests. The domains often contain "cookie", "privacy", "consent", or similar, and blocking them does the trick. uBlock Origin lets you do that once you tick the "I am an advanced user" box.


This is fantastic, but a very spicy business. All Claude needs to do is add one feature and you've got your whole business nuked from orbit.


What business? This seems to be completely free, with no pricing, in-app purchases, or anything. That being said, it's strange that it doesn't seem to be open-source.


Kind of like Cursor? Just a couple more features (now)


The main benefit of Cursor is avoiding model lock-in. So a solution made only for Claude code seems to be on a much shakier footing.


MCP is widely adopted. This will work with anything that talks it.


Then you've just traded that for lock-in to Cursor, no?


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: