frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Tesla Roadster

https://www.tesla.com/roadster
698•shekhar101•18h ago•1312 comments

Claude reveals ECDSA curve origins

https://www.anthropic.com/research/ecdsa-curve-origins
206•ahlCVA•56m ago•87 comments

The NIST Elliptic Curves Seeds Bounty Has Been Claimed

https://words.filippo.io/seeds-solved/
29•aburan28•49m ago•2 comments

Llama.cpp on a jailbroken PS5: run any GGUF model natively on the console

https://github.com/cobanov/PS5LM
52•Anon84•1h ago•8 comments

JPEG XL vs. AVIF for web use-cases

https://jakearchibald.com/2026/jpeg-xl-vs-avif/
122•farlight•3h ago•89 comments

90% of US working hours are spent on tasks not covered well by AI benchmarks

https://www.mercor.com/research/labor-index/benchmark-map/
245•speckx•2h ago•209 comments

Waymo in Toronto

https://waymo.com/blog/2026/10/waymo-in-toronto/
132•ChrisArchitect•5h ago•252 comments

eBay Restricts Listings of Radio Equipment, but Exempts Ham-Band-Only Gear

https://www.arrl.org/arrlletterissue?issue=2026-10-15#eBay-Restricts-Listings-of-Radio-Equipment_...
84•7402•1h ago•60 comments

Apple ML Research: Muse Spark Open with MLX on Mac Studio

https://machinelearning.apple.com/research/mlx-distributed-inference
211•antipaul•6h ago•100 comments

Designing more efficient quantum circuits with Claude

https://www.anthropic.com/research/designing-efficient-quantum-circuits
39•pretext•1h ago•6 comments

Piramidal (YC W24) Is Hiring

https://job-boards.greenhouse.io/piramidalinc/jobs/4443102009
1•dsacellarius•2h ago

The Fatal Flaw of 911

https://www.themarshallproject.org/2026/10/16/911-book-policing-mental-health
8•plunge•19m ago•3 comments

How the Claude Code team does code review

https://claude.dev/blog/solving-code-review-at-anthropic/
40•pretext•48m ago•33 comments

/dev/null: social network for developers

https://dev-null.sh
55•mnapoli•2h ago•75 comments

Show HN: Gemini 4 Argon plays StarCraft

https://starskirmish.com/bench/v0-2/
148•__cayenne__•5h ago•69 comments

Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD

https://calif.io/research/big-fish
136•rs_rs_rs_rs_rs•5h ago•36 comments

C++26: The New Debugging Header

https://www.sandordargo.com/blog/2026/09/30/cpp26-debugging
9•jandeboevrie•1h ago•0 comments

What on Earth Is Dekton?

https://www.worksinprogress.news/p/porcelain
102•wawayanda•5h ago•35 comments

Stolen Renoir paintings found hidden, and damaged, behind cinder block wall

https://www.cbsnews.com/news/stolen-renoir-paintings-found-behind-wall-france/
82•ohjeez•3d ago•53 comments

Anthropic assigned highest junk credit rating in June

https://www.ft.com/content/5a310aee-f555-4266-874c-b1b4db20186d
81•JumpCrisscross•1h ago•22 comments

GifCities

https://gifcities.org/
14•augury•2h ago•0 comments

I Love Software Rendering

https://www.jamesfmackenzie.com/2026/10/13/i-love-software-rendering/
252•speckx•7h ago•175 comments

Show HN: Stoke Money – Personal finance app built around a cash flow forecast

https://stoke.money
7•_wesley•58m ago•1 comments

Woman who rescued injured crow keeps getting 'thank-you gifts' from birds [video]

https://www.youtube.com/watch?v=sjNpfz4UzqU
785•johnnyApplePRNG•3d ago•234 comments

Monte-Carlo Simulations

https://eli.thegreenplace.net/2026/monte-carlo-simulations/
9•ibobev•3d ago•0 comments

RFC8950: Announce IPv4 with an IPv6 next-hop

https://anuragbhatia.com/post/2026/06/rfc8950-announce-ipv4-with-ipv6-next-hop/
76•porridgeraisin•6h ago•38 comments

Is Liquid Metal Killing Our PCs? Scientific Analysis and a 2-Year Test [video]

https://www.youtube.com/watch?v=eF6bMSjPepM
66•zdw•20h ago•41 comments

Making 1,750 programmable PCB badges for Canada's biggest hackathon

https://va3ndf.com/blog/hacker-badges/
33•va3ndf•2d ago•8 comments

Yet another way to invoke functions without parentheses

https://blog.ikaes.de/yet-another-way-to-invoke-functions-without-parentheses/
232•aragonite•3d ago•101 comments

US Rep Announces Congressional Legislation to Protect Video Game Ownership

https://ritchietorres.house.gov/posts/rep-torres-announces-power-to-the-players-act-legislation-t...
155•DeepLogin•3h ago•85 comments
Open in hackernews

Anthropic Console overcharged my card 100x due to internationalization input bug

50•rsorto•2h ago
I am a LegalTech Attorney leading a developer team from Costa Rica. While trying to load credits onto my Anthropic API account (claude.com), I experienced a critical internationalization (i18n) and UX failure that has placed an unfair financial burden on me due to a severe oversight in their payment pipeline.

The platform prompted me for a payment. Since I am in a Spanish-speaking region where localized systems and keyboards handle dots and commas differently, I typed 5.04.

Anthropic’s input system completely failed to sanitize or validate the data. Instead of throwing a formatting error or converting it properly, it silently stripped the decimal internally and instantly charged my credit card $504.00 USD instead of $5.04 USD.

To make matters worse, there was no confirmation modal or review screen summarizing the final amount before processing the transaction. It was a single-click, instantaneous overcharge.

Anticipating the Obvious Skepticism: Before anyone suggests "you should have checked your regional settings" or "just wait for the chargeback":

1. Users are not the QA team: In financial software, a system is never supposed to guess or automatically manipulate a numerical input without explicit validation. If an input is ambiguous due to locale differences, the application must reject it or ask for clarification, not execute a 100x overcharge.

2. Scale of the vulnerability: This time it was $504.00, which is an unfair and frustrating burden for independent developers. But because this pipeline completely lacks a confirmation screen and basic input sanitization, the exact same bug could happen to someone typing 50.00 and end up charging them $5,000.00 or more instantly. It is a systemic financial risk.

3. The Chargeback Illusion: Yes, I have already initiated a chargeback with my bank in Costa Rica. However, banking processes here are slow and take up to 120 days to resolve. In the meantime, the $504.00 has already been deducted and charged to my credit card statement. I am forced to pay for Anthropic’s engineering mistake out of my own pocket right now.

The Support Wall: I filed an official complaint on the exact same day, minutes after it happened. I wasn't met with a human; I was blocked by an automated support BOT. The bot repeatedly and rigidly denied the refund, closing the ticket by citing generic policies without a single human ever looking at the fact that the overcharge was caused by a technical bug in their own platform.

As developers, we build systems that process people's money. Omitting a confirmation screen on a financial transaction, failing to sanitize localized numerical inputs, and then hiding behind unyielding AI support bots to keep money that doesn't belong to you is completely unacceptable.

If anyone from Anthropic's billing or engineering team is reading this, please look into this bug and review my case. It is a critical flaw that is actively harming international developers who are just trying to build on your ecosystem.

Pura vida!

R.S.G.

Comments

rsorto•1h ago
UPDATE: I just checked my bank statement and it’s even worse than I thought. Because the system processed the incorrect $504.00 base amount, it automatically calculated local VAT (taxes) on top of it, adding an extra $65.52. The absolute total taken from my card by this single-click bug is $569.52.

Here is the proof of the bank statement pending charge:

https://ibb.co/tMVkf0nx

UnlockedSecrets•50m ago
did this post really need to be written by AI?
cyanydeez•46m ago
do you think a human overcharged them or did an AI?
rsorto•39m ago
Hola, thanks for your reply.

Please note that English is not my native language. I used AI to make sure that my technical explanation of the decimal bug was clear and well structured so that the community here could understand it.

I agree that the text structure might look robotic, but the $569.52 unauthorized charge on my credit card right now is 100% real.

Pura vida!

rrauenza•34m ago
Your situation is not funny, but it reminded me of an old story from the internet in the 1990's, The Neiman Marcus Cookie Recipe

> My daughter & I had just finished a salad at Neiman-Marcus Cafe in Dallas & decided to have a small dessert. Because our family are such cookie lovers, we decided to try the "Neiman-Marcus Cookie". It was so excellent that I asked if they would give me the recipe and they said with a small frown, "I'm afraid not." Well, I said, would you let me buy the recipe? With a cute smile, she said, "Yes." I asked how much, and she responded, "Two fifty." I said with approval, just add it to my tab.

It ends with them being charged $250 not $2.50 and the author shares the recipe with the world as revenge.

https://www.snopes.com/fact-check/neiman-marcus-cookies/

jrochkind1•32m ago
I think it's a frequent misconception that the AI version is going to be clearer or more well-structured or easier to read or understand than what you would write as a non-native-English speaker. It's probably not.
merb•32m ago
What did you want to accomplish with 5.04??

In Spanish or other European countries 5,04 would’ve been correct?

So 5.04 would either be invalid or 504 like Claude did.

rsorto•22m ago
Hola Merb,

To be 100% clear: I wanted to load exactly five dollars and four cents ($5.04) into my account. I typed 5.04.

The core problem here is that in secure financial pipelines, ambiguous inputs must trigger a validation error and reject the transaction, not silently guess the amount and execute a 100x overcharge.

If Anthropic's backend expected a comma due to my regional settings and couldn't parse the dot, the correct engineering behavior is to throw an "Invalid Format" message and disable the pay button. Silently stripping the decimal character and instantly draining $569.52 (including local VAT taxes) from a user's card with zero confirmation screen is a catastrophic failure in error prevention.

Gracias!

rrauenza•16m ago
Someone above also points out the inverse also fails for a decimal locale:

> I'm looking at the "Add credits" screen on https://platform.claude.com and it prominently displays the "total due" as $504.00 when typing `5,04` into the input...

striking•24m ago
I'm looking at the "Add credits" screen on https://platform.claude.com and it prominently displays the "total due" as $504.00 when typing `5,04` into the input...
rsorto•17m ago
Striking, thanks for the comment,

Please note that I typed 5.04 (with a dot), not a comma.

I was doing a manual account recharge (adding credits), where the user defines an arbitrary prepaid amount. On a localized system/keyboard setup, entering the dot did not alter the total due or warn me of a 100x increase before hitting the submit button.

Also, the core issue is the complete lack of a final checkout/confirmation step for an arbitrary recharge amount. In proper financial UX, clicking the primary button should trigger a modal stating: "You are about to recharge your account with $504.00 USD + $65.52 VAT. Total due: $569.52. Confirm payment?". Executing an instantaneous credit card charge on a single click while silently processing ambiguous inputs is precisely the dangerous design flaw I am pointing out.

Saludos,

tallanvor•11m ago
It feels more like a writing exercise - too many extraneous details right from the start: "I am a LegalTech Attorney leading a developer team" feel necessary if you're telling a story, but is completely irrelevant if you're reporting an issue. And $5.04?? Who knows their spending requirements to that level of specificity?

Is it possible? I guess, but I doubt they're being honest about what was being displayed on the screen.

nottorp•20m ago
Lots of space for vibe coding jokes here. And 504 is significant for Costa Rica, it can buy a lot of lattes.

On a more serious note, do these vibe coded chatbot payment UIs accept like one time use Revolut CC numbers?

And on a second serious note, have they heard of 3D secure or you simply can't pay with an european credit card?