Live data from Hacker News

We will ban you and ridicule you in public if you waste our time on crap reports

curl.se

111–120 of 653 posts

Re: We will ban you and ridicule you in public if you waste our time on crap reports

#111
post #61

Earlier quoted context omitted.

This sounds like a real cross-cultural mismatch, but it’s doing too much work with nationality alone. In a lot of Indian (and broader South Asian) work contexts, questioning instructions can be read as challenging authority or admitting incompetence, so people default to executing without asking. That’s often reinforced by education systems and contractor dynamics where producing something quickly feels safer than pa…

> questioning instructions can be read as challenging authority or admitting incompetence, so people default to executing without asking That’s ego, assuming doing is the value, not doing RIGHT. Doing alone has almost zero value.

It’s how not to get fired, ostracized, etc. I don’t understand how you read that as ego.

Re: We will ban you and ridicule you in public if you waste our time on crap reports

#112
post #33

Earlier quoted context omitted.

Money for a report and a patch, with convincing test cases, might be worthwhile. Even if a machine generates them.

I've read this idea that we could make people pay for security reports a few times here on HN (and you get back the money if the report is deemed good). That feels very wrong. If I find a security issue, I'm willing to responsibly disclose it, but if you make me pay, I don't think I will bother. Punishing bad behavior to disincentivize it seems more sensible.

Punishing bad behaviour does close to nothing, because the problem at hand is one of high asymmetry between the low effort to submit vs the high effort to review. I do agree that paying for reports isn't ideal, and we should find other ways to level the playing field, but in the meantime I haven't heard of anything as effective.

Re: We will ban you and ridicule you in public if you waste our time on crap reports

#113
post #61

Earlier quoted context omitted.

This sounds like a real cross-cultural mismatch, but it’s doing too much work with nationality alone. In a lot of Indian (and broader South Asian) work contexts, questioning instructions can be read as challenging authority or admitting incompetence, so people default to executing without asking. That’s often reinforced by education systems and contractor dynamics where producing something quickly feels safer than pa…

> questioning instructions can be read as challenging authority or admitting incompetence, so people default to executing without asking That’s ego, assuming doing is the value, not doing RIGHT. Doing alone has almost zero value.

[flagged]

Re: We will ban you and ridicule you in public if you waste our time on crap reports

#114
post #61

Earlier quoted context omitted.

This sounds like a real cross-cultural mismatch, but it’s doing too much work with nationality alone. In a lot of Indian (and broader South Asian) work contexts, questioning instructions can be read as challenging authority or admitting incompetence, so people default to executing without asking. That’s often reinforced by education systems and contractor dynamics where producing something quickly feels safer than pa…

To add to that, it is culturally acceptable and even lauded in India to achieve something by "gaming the system", something usually considered unethical in the west (okay maybe less so in the US). I would be ashamed to submit an AI slop PR or vulnerability report. An indian might just say "I have 25 merged PRs in open source projects"

Term for this is "chalaki"

Re: We will ban you and ridicule you in public if you waste our time on crap reports

#115

Earlier quoted context omitted.

Why you don’t just put an AI guardian to close or to ask them to change the story. Or shadow ban

Subjecting every real contributor to the "AI guardian" would be unfair, and shadow banning is ineffective when you're dealing with a large number of drive-by nuisances rather than a small number of dedicated trolls. Public humiliation is actually a great solution here.

> Subjecting every real contributor to the "AI guardian" would be unfair

Had my first experience with an "AI guardian" when I submitted a PR to fix a niche issue with a library. It ended up suggesting that I do things a different way which would have to involve setting a field on a struct before the struct existed (which is why I didn't do that in the first place!)

Definitely soured me on the library itself and also submitting PRs on github.

Re: We will ban you and ridicule you in public if you waste our time on crap reports

#116

I am friends with a solo maintainer of a major open source project. He repeatedly complains that at the beginning of some semester, he sees a huge spike of false/unproveable security weakness reports / GutHub issues in the project. He thinks that there is a Chinese university which encourages their students to find and report software vulns as part of their coursework. They don’t seem to verify what they describe is…

As a human being I really enjoy knowing things and being challenged to grow.

While crypto style AI hype man can claim Claude is the best thing since sliced bread the output of such systems is brittle and confidently wrong.

We may have to ride out the storm, to continue investing in self learning as big tech cannot truly spend 1.5 trillion on the AI investment in 2025 without a world changing return on revenue, a one billion revenue last year from OpenAI is nothing.

Re: We will ban you and ridicule you in public if you waste our time on crap reports

#117
post #64

Earlier quoted context omitted.

> Indian students Is this cultural? I ran a small business some years ago (later failed) and was paying for contract work to various people. At the I perceived the pattern that Indian contractors would never ever ask for clarifications, would never say they didn't know something, would never say they didn't understand something, etc. Instead they just ran with whatever they happened to have in their mind, until I cal…

selfishness, laziness, lack of self-awareness, lack of shame, etc are obviously universal traits. But cultures absolutely reinforce them to different degrees. Many cultures around the world are built around the sorts of behaviors we both described. Whereas other cultures have at least some (if not a lot of) resistance to it - eg publicly ridiculing when people step flagrantly out of line. This is good. My impression…

people who actually have a life generally don't spend time hanging around internet forums so it's important to consider that a disconnection from reality is involved in places like these , thru my eyes you have restated the idea of low trust vs high trust societies without building on top of the idea , which isnt downvote worthy but isnt upvote worthy either

Re: We will ban you and ridicule you in public if you waste our time on crap reports

#119
post #112
post #33

Earlier quoted context omitted.

I've read this idea that we could make people pay for security reports a few times here on HN (and you get back the money if the report is deemed good). That feels very wrong. If I find a security issue, I'm willing to responsibly disclose it, but if you make me pay, I don't think I will bother. Punishing bad behavior to disincentivize it seems more sensible.

Punishing bad behaviour does close to nothing, because the problem at hand is one of high asymmetry between the low effort to submit vs the high effort to review. I do agree that paying for reports isn't ideal, and we should find other ways to level the playing field, but in the meantime I haven't heard of anything as effective.

> the problem at hand is one of high asymmetry between the low effort to submit vs the high effort to review

Hence the threat to shame publicly I suppose.

Actually, Daniel Stenberg previously responded to this proposal the same way as me [1] (and maybe would still do). Coincidentally, I was reading your answer at about the same time as this part of the talk.

[1] https://www.youtube.com/watch?v=6n2eDcRjSsk&t=1823s (via https://news.ycombinator.com/item?id=46717556#46717822)

Post reply on HN