Hacker News

Subscribe to Hacker News feed
Hacker News RSS
Updated: 57 min 8 sec ago

Tell HN: Mindie.dev is scraping emails from profiles to send spam

Sat, 05/16/2026 - 9:06pm

Got the following from hello@mindie.dev

----

Hey Stackghost —

Saw your HN comment about freelance time tracking / invoicing. TimeChat is a Telegram bot: type "1.5 acme bug fix" after work, end of month it auto-generates the PDF invoice for your client. Side-by-side vs Toggl: mindie.dev/vs/toggl.

For HN readers I'm running EARLY10: $1/mo (was $7). One-click checkout: timechat pro 2-mo trial

If it's useful, I'd love your feedback. Free tier covers solo testing if you want to start there: https://timechat.mindie.dev

Not relevant? Reply STOP and I'll never email again.

— the Mindie team mindie.dev

----

I went back through my comment history and I don't believe that I have ever mentioned freelancing, time tracking, or invoicing in a comment except once when I mentioned an invoice peripherally a year ago.

Thus, mindie.dev is scraping emails from profiles and hallucinating relevant reasons to try to grease their sales funnel.

Attempting to unsubscribe via their "reply stop and I'll never email again" resulted in a bounced email.

I find this behavior to be ultra scummy and dishonest. I enjoy the communal feel from people having open emails on their profiles but it seems the taboo has been broken. I will be removing my email from my profile and suggest you do the same.

Comments URL: https://news.ycombinator.com/item?id=48165211

Points: 3

# Comments: 0

Categories: Hacker News

Humans VS AI.IO – Update, New features and turrets

Sat, 05/16/2026 - 8:55pm

Article URL: https://humansvsai.io

Comments URL: https://news.ycombinator.com/item?id=48165169

Points: 1

# Comments: 0

Categories: Hacker News

Turnspit Dog

Sat, 05/16/2026 - 8:41pm
Categories: Hacker News

What A.I. Kant Do

Sat, 05/16/2026 - 8:37pm
Categories: Hacker News

FCP – Free Communication Protocol

Sat, 05/16/2026 - 8:25pm

Article URL: https://fcp.md/

Comments URL: https://news.ycombinator.com/item?id=48165023

Points: 2

# Comments: 1

Categories: Hacker News

Show HN: Built a verifiable, open-source SoC 2 readiness scanner

Sat, 05/16/2026 - 8:02pm

After speaking with over 50+ CISOs, DevOps, & pre-series A founders for months, I realized a problem in the GRC industry. SOC 2 automation exists, but people are split between trusting these black-box tools with systems that are continuously changing. As a result audits are slow & mistrusted.

Right now the most important thing is verifiability & depth, rather than just compliance automation-because it does exist, everywhere.

Here's what I did from learning this:

-> Created an open-source AWS Evidence Scanner & Control Mapper for lean, pre-series A AWS-Native teams thinking about SOC 2 Type l or are undergoing SOC 2 Type l audit. Collects across 15+ AWS Services to 12 critical controls in the trust-service criteria.

Why open-source? Accessibility for people who might have their hands tied choosing between expensive GRC tools. Its also used as a trust-mechanism. Code is right there. A CEO or auditor can read exactly what API calls we make before giving us the role ARN.

-> I included a paid report embedded within the tool (open-core model). Users have the option to pay for the report in which every finding traces back to the API call that produced it. SHA-256 hashed (at a fraction of the cost of bigger legacy platforms). With remediation steps & a compliance-copilot to help with other parts of the Type l process beyond evidence collection (like policy writing, risk assessment, etc).

Why paid report? The best way to make the auditors job as easy as possible is to give them a verifiable package where the evidence is right there in front of them, timestamped so they can see what happened, when (rooted in AWS APIs). No black-box, no way to fake it. Saving weeks of back & forth between auditors and clients, with the click of a few buttons.

An auditor can re-run the same API call, hash the response themselves, and verify it matches what's in the report.

Value: 30 seconds to deploy. 5 mins to run the scan & evidence is collected & mapped. Paid report includes verifiable evidence companies can send to their auditor. Paid features include a co-pilot to help with audit-readiness beyond just evidence collection.

-> Understand Limitations.

I understand the scope of this product is pretty limited in part because its also very new. I'm not going to claim it solves all of compliance, because it doesn't. It makes a very time-consuming part of the process very accessible to be automated & gives an auditor a report they can rely on.

What now? Anyone who's gone through, thinking about or is in the middle of SOC 2, would love your reaction to the output, even if it's critical. Also looking for early testers/users.

repo here: https://github.com/adog0822/AWS-Evidence-Layer

try it here: https://loxeai.com

Comments URL: https://news.ycombinator.com/item?id=48164906

Points: 1

# Comments: 0

Categories: Hacker News

Pages