Vercel April 2026 security incident

501 colesantiago 2026-04-19 14:14:38 UTC bleepingcomputer.com Llama Share 298

Vercel disclosed a security incident after threat actors claimed to have breached its systems and are selling stolen data. The company is investigating and notifying affected customers, advising them to review environment variables and rotate secrets.

Vercel says internal systems hit in breach

376 whiteyford 2026-04-19 15:23:39 UTC decipher.sc Llama Share 2

Vercel disclosed a breach of its internal systems affecting a limited subset of customers. The company is investigating with incident response experts and notifying affected customers directly.

Notion leaks email addresses of all editors of any public page

315 Tiberium 2026-04-19 15:20:01 UTC twitter.com/weezerosint Full Share 108

Something went wrong, but don’t fret — let’s give it another shot. Some privacy related extensions may cause issues on x.com. Please disable them and try again.

The seven programming ur-languages (2022)

277 helloplanets 2026-04-19 07:38:08 UTC madhadron.com Llama Share 104

The user explains that programming languages can be grouped into seven fundamental "ur-languages" that share common patterns and characteristics, and that learning a language from the same ur-language is easier than learning one from a different ur-language. The user suggests learning a language from the ALGOL family (such as Python or Java), then learning a language from the Prolog family ...

Ask HN: How did you land your first projects as a solo engineer/consultant?

243 modelcroissant 2026-04-19 09:17:12 UTC news.ycombinator.com Llama Share 111

You started a solo consultancy helping SMEs with back-office issues and are looking for advice on getting your first project. You're offering 10 hours free to the first 5 clients to help them get started.

Airline worker arrested after sharing photos of bomb damage in WhatsApp group

241 aa_is_op 2026-04-19 13:13:09 UTC lbc.co.uk Llama Share 157

A Dubai airline worker was arrested for sharing bomb damage photos in a private WhatsApp group, charged with publishing information harmful to state interests. He remains in detention, highlighting concerns over Dubai's surveillance operations and access to private communications.

The world in which IPv6 was a good design (2017)

207 signa11 2026-04-19 02:50:43 UTC apenwarr.ca Llama Share 126

The user attended an IETF meeting to learn about TCP BBR and observed the ongoing debate about IPv6 replacing IPv4, which led them to investigate the history of networking protocols and their complexities. The user discovered that the intertwining of ethernet and IP protocols has resulted in a complicated system, making it difficult to imagine a network without MAC addresses and IP addresses, ...

Swiss authorities want to reduce dependency on Microsoft

197 doener 2026-04-19 20:25:29 UTC swissinfo.ch Llama Share 76

Switzerland aims to reduce its dependency on Microsoft products, citing concerns over data security. A feasibility study shows replacing Microsoft with open-source software is possible, with Germany serving as a reference.

Changes in the system prompt between Claude Opus 4.6 and 4.7

192 pretext 2026-04-19 10:36:29 UTC simonwillison.net Llama Share 115

Anthropic published system prompts for their chat system, with updates from Claude 3 to Opus 4.7, showing changes in child safety, tool usage, and response style. The new prompt includes tools like Claude in Chrome and a tool search mechanism to resolve ambiguities.

The RAM shortage could last years

178 omer_k 2026-04-19 07:18:44 UTC theverge.com Llama Share 179

Memory makers will meet only 60 percent of demand by 2027 due to production shortages. New fabrication capacity won't be online until 2027 or 2028, exacerbating the RAM shortage.

Keep Pushing: We Get 10 More Days to Reform Section 702

172 nobody9999 2026-04-19 07:05:17 UTC eff.org Llama Share 37

Lawmakers blocked a reauthorization of Section 702 with no changes, pushing for a 10-day extension to pass real reform. They want probable cause warrants for FBI access to collected information, not just a blanket reauthorization.

SPEAKE(a)R: Turn Speakers to Microphones for Fun and Profit [pdf] (2017)

158 Eridanus2 2026-04-19 08:45:48 UTC usenix.org Llama Share 67

A new type of malware called SPEAKE(a)R can covertly turn headphones, earphones, or simple earbuds connected to a PC into microphones when a standard microphone is not present, muted, taped, or turned off. The malware can record human speech of intelligible quality and eavesdrop from nine meters away, posing a significant cyber security threat.

The creative software industry has declared war on Adobe

155 tambourine_man 2026-04-19 14:05:49 UTC theverge.com Llama Share 140

Adobe's Creative Cloud is facing competition from free alternatives like Autograph and Canva, which offer similar design tools at no cost. Industry rivals like Apple and DaVinci Resolve are also undercutting Adobe's pricing with affordable subscription options.

The Bromine Chokepoint

138 crescit_eundo 2026-04-19 17:44:03 UTC warontherocks.com Llama Share 70

A global semiconductor memory supply chain is vulnerable to a bromine shortage due to Israel's reliance on bromine imports and limited conversion capacity outside the country. A disruption would immediately impact global memory production, affecting consumer devices, military systems, and AI infrastructure.

Notes from the SF peptide scene

117 theahura 2026-04-19 14:43:07 UTC 12gramsofcarbon.com Llama Share 124

The author visited the Bay Area and observed a culture of extreme sincerity, where people take everything seriously, including absurd conversations and behaviors. They attended a "spring gay peptide party" where people injected each other with peptides for weight loss and other purposes.

Turtle WoW classic server announces shutdown after Blizzard wins injunction

107 Brajeshwar 2026-04-19 15:48:40 UTC pcgamer.com Llama Share 85

Turtle WoW, a popular World of Warcraft private server, is shutting down on May 14 after a cease and desist from Blizzard. The server will close its servers to the final patch and associated social media channels will shut down later this year.

When moving fast, talking is the first thing to break

104 Brajeshwar 2026-04-19 14:34:38 UTC daverupert.com Llama Share 46

Prioritizing speed over communication can lead to faulty designs and system inconsistencies. This approach can create technical debt and hinder future collaboration, ultimately harming the organization.

Show HN: Faceoff – A terminal UI for following NHL games

93 vcf 2026-04-19 17:44:44 UTC vincentgregoire.com Full Share 33

This project was inspired by Playball, a similar terminal application for following MLB baseball games. This project is not affiliated with, endorsed by, or in any way officially connected with the National Hockey League (NHL), any of its teams, or any of its affiliates. All NHL logos, trademarks, and data are the property of the NHL and its teams.

PM Carney declares U.S. ties now a 'weakness' in address to Canadians

92 Teever 2026-04-19 16:21:31 UTC ctvnews.ca Full Share 50

In a direct address to the nation, Prime Minister Mark Carney has reframed Canada's long-standing relationship with the United States as a 'weakness' that must be urgently corrected under the shadow of the Trump presidency.

Russia's doping program is run by the same FSB team that poisoned Navalny

91 dralley 2026-04-19 15:09:45 UTC theins.press Llama Share 77

Dmitry Kovalev, an FSB colonel, has been involved in Russia's doping program and has testified on behalf of Russia in international sports cases. He also works for the FSB's Directorate for the Protection of the Constitutional Order, which is responsible for eliminating political opponents using nerve agents.

Banned by Anthropic?

87 gck1 2026-04-19 22:33:31 UTC bannedbyanthropic.com Llama Share 61

Users experienced Anthropic's safety filter restrictions due to misinterpreted language, including technical terms and metaphors, resulting in lost access, missed deadlines, and financial losses. Users are calling for improved safety filters that understand human context and expression.

Show HN: Prompt-to-Excalidraw demo with Gemma 4 E2B in the browser (3.1GB)

85 teamchong 2026-04-19 11:17:27 UTC teamchong.github.io Full Share 43

Gemma 4 E2B generating Excalidraw diagrams from text prompts, running entirely in desktop Chrome via WebGPU. KV cache compressed 2.4× using TurboQuant's polar+QJL algorithm reimplemented in WGSL compute shaders. Requires Chrome 134+ on desktop — Safari/iOS not supported.

Binary GCD

80 tosh 2026-04-19 08:33:38 UTC en.algorithmica.org Llama Share 1

The binary GCD algorithm is a variant of Euclid's algorithm that uses binary shifts, comparisons, and subtractions to find the greatest common divisor of two numbers, which is ~2x faster than the C++ standard library's gcd function. The algorithm's performance can be further optimized by using __builtin_ctz to reduce the number of iterations and by rearranging the assembly code to take ...

CEOs admit AI had no impact on employment or productivity

67 tcp_handshaker 2026-04-19 21:56:22 UTC fortune.com Llama Share 57

Economists are concerned that AI adoption is not translating to productivity gains, echoing Robert Solow's 1987 observation of the "productivity paradox." Despite firms expecting AI to boost productivity, data shows little impact on employment or productivity.

MAGA Is Winning Its War Against U.S. Science

66 devonnull 2026-04-19 19:35:57 UTC paulkrugman.substack.com Llama Share 27

The Trump administration's budget proposal severely cuts research funding and reduces the approval rate of research grants, threatening US scientific research. This anti-science turn is part of a broader Republican hostility to science, driven by disagreements with the scientific consensus on issues like evolution and climate change.

Why Zip drives dominated the 90s, then vanished almost overnight

65 naves 2026-04-19 10:55:38 UTC xda-developers.com Llama Share 86

Zip drives were a popular portable storage format in the 90s with high capacity and speed, but they failed due to frequent failures known as the "click of death". The format eventually lost market presence to CDs and USB flash drives, leading to Iomega's downfall and the eventual removal of its branding from products.

A. J. Ayer – ‘What I Saw When I Was Dead’ (1988)

64 isomorphy 2026-04-19 20:04:13 UTC philosopher.eu Llama Share 75

Ayer recounts his near-death experience, where he died for four minutes, and upon revival, had vivid memories of a red light and attempting to fix space-time. His experience suggests consciousness may continue after death, but does not necessarily imply a future life.

Blue Origin's rocket reuse achievement marred by upper stage failure

58 rbanffy 2026-04-19 19:41:24 UTC arstechnica.com Llama Share 22

Blue Origin's New Glenn rocket successfully reused a booster but failed to reach its intended orbit due to an upper stage issue. The mission's payload, a cellular broadband satellite, was placed into an inaccurate orbit and will be de-orbited.

Matt Mullenweg Overrules Core Committers; Puts Akismet on WP 7's Connector List

56 mooreds 2026-04-19 14:24:04 UTC therepository.email Llama Share 51

Matt Mullenweg overruled core committers to register Akismet on WordPress 7.0's Connectors screen. The decision sparked controversy over process and contribution recognition, with Mullenweg defending Automattic's contributions to WordPress.

Ex-CEO, ex-CFO of bankrupt AI company charged with fraud

55 1vuio0pswjnm7 2026-04-19 22:30:19 UTC reuters.com Full Share 21

Please enable JS and disable any ad blocker

Uber's AI Push Hits a Wall–CTO Says Budget Struggles Despite $3.4B Spend

51 dakiol 2026-04-19 18:13:32 UTC finance.yahoo.com Llama Share 62

Uber spent $3.4 billion on AI research and development, exhausting its budget early in 2026 due to rapid adoption and high costs. The company is now testing OpenAI's Codex to expand its AI stack and aims for AI to handle coding and deployment tasks.

Show HN: Google Gemini Is Scanning Your Photos – and the EU Said No

51 anju-kushwaha 2026-04-19 16:36:09 UTC news.ycombinator.com Llama Share 17

Google's Personal Intelligence feature now uses Google Photos, Gmail, and YouTube data to generate AI images, but users must opt-in. Some users are moving their data to alternative services like Ente and Immich due to concerns over data collection.

2,100 Swiss municipalities showing which provider handles their official email

45 doener 2026-04-19 22:55:47 UTC mxmap.ch Full Share 12

Each municipality's official domain is checked via 11 signals from DNS records, SMTP banners, ASN lookups, and a public Microsoft API endpoint, then classified by provider type with confidence scoring. Disclaimer: DNS records indicate mail routing and authorized senders, not necessarily where data is stored.

Six Levels of Dark Mode (2024)

39 Akcium 2026-04-19 18:36:00 UTC cssence.com Llama Share 10

The author discusses six levels of dark mode in CSS, starting with a meta tag that allows browsers to follow user color scheme preferences. They then explore CSS color-scheme declarations, light-dark() color functions, and media queries for maximum customization.

I wrote a CHIP-8 emulator in my own programming language

36 pizza_man 2026-04-19 19:21:22 UTC github.com/navid-m Full Share 10

Chip8 Emulator. Contribute to navid-m/chip8emu development by creating an account on GitHub.

A Brief History of Fish Sauce

35 vinhnx 2026-04-19 08:32:53 UTC legalnomads.com Llama Share 9

Fish sauce has a long history, with ancient Greeks and Romans producing garum and liquamen, while Southeast Asians independently developed nuoc mam and nam pla. The origins of fish sauce are unclear, but it remains a crucial condiment in Southeast Asian cuisine, with various regional variations and uses.

Claude Brain

33 DeathArrow 2026-04-19 15:48:13 UTC github.com/memvid Llama Share 21

User needs help with GitHub plugins setup and code review. They should send their .mv2 file for assistance.

Surely no brand is more hated by web users that Cloudflare

31 chrisjj 2026-04-19 02:06:43 UTC news.ycombinator.com Llama Share 34

Cloudflare's security measures cause frustration for users when blocking site access, despite being free advertising for developers. Site owners can control how often users see Cloudflare captchas, but users still experience frequent interruptions.

C++26: Reflection, Memory Safety, Contracts, and a New Async Model

27 birdculture 2026-04-19 21:00:49 UTC infoq.com Llama Share 2

C++26 introduces reflection, memory safety enhancements, contracts, and a unified concurrency framework. It simplifies evolution and improves performance, safety, and concurrency with no runtime overhead.

Europe has 'maybe six weeks of jet fuel left'

27 measurablefunc 2026-04-19 18:32:12 UTC bbc.com Llama Share 2

Europe's jet fuel stocks may last six weeks, with potential flight cancellations if supplies remain blocked. The International Energy Agency warns of shortages if Europe can't replace at least half of its Middle Eastern imports by June.

Got an Old Kindle? It Might Not Work Anymore

26 eigenhombre 2026-04-19 22:56:32 UTC nytimes.com Llama Share 13

Amazon will stop supporting older Kindle and Fire devices released in 2012 or earlier on May 20. Users can upgrade to a new Kindle with a 20% discount and $20 e-book credit until June 20.

Bipartisan Bill to Tighten Controls on Sensitive Chipmaking Equipment

25 num42 2026-04-19 03:33:49 UTC baumgartner.house.gov Llama Share 15

Congressman Michael Baumgartner introduced the MATCH Act to strengthen US national security by closing gaps in export controls on semiconductor manufacturing equipment. The bipartisan bill aims to create a level playing field for US and allied toolmakers and prevent China from dominating the semiconductor supply chain.

Scientific datasets are riddled with copy-paste errors

24 jruohonen 2026-04-19 19:18:57 UTC sciencedetective.org Llama Share 1

A software detected 18 cases of potential data errors in 600 open-access datasets, with 15 cases posted on PubPeer. The true error rate is likely higher than the estimated 3% due to undetectable errors and less lazy methods of data fabrication.

Critical flaw in Protobuf library enables JavaScript code execution

24 Brajeshwar 2026-04-19 16:37:06 UTC bleepingcomputer.com Llama Share 11

A critical remote code execution flaw in protobuf.js has been published, allowing attackers to inject arbitrary code via unvalidated schema-derived identifiers. The issue affects versions 8.0.0/7.5.4 and lower, and can be fixed by upgrading to 8.0.1 and 7.5.5.

Hot Wiring the Lisp Machine

23 spudlyo 2026-04-19 16:57:41 UTC scheatkode.com Llama Share 0

The user created a static website generator called opd that uses Emacs's Org-mode to generate HTML from Org files without any external dependencies. The generator uses a routing layer to handle different types of content and a two-pass compiler to resolve links and generate URLs, and it has a flexible and composable API that allows users to define custom routes and filters.

Gender reassignment significantly increases psychiatric morbidity

22 hereme888 2026-04-19 16:45:05 UTC onlinelibrary.wiley.com Full Share 14

Aliens.gov will be running as a WordPress multisite

21 johnnyApplePRNG 2026-04-19 22:19:22 UTC aliens.gov Full Share 18

This is a multisite, but a site was not found at the requested URL. Please check the URL and domain mapping and try again.

Discord Read Receipts Exploit: When, How Often, How Long

20 pauxel 2026-04-19 15:04:45 UTC paul.koeck.dev Llama Share 4

The user discovered a bug in Discord's link preview feature that allows them to track when and how often a message is read by others, including the time it was visible. They created a proof-of-concept app that exploits this bug, allowing them to track message reads with a high degree of accuracy.

Reminder: Enable ZRAM on your Linux system to optimize RAM usage

15 type0 2026-04-19 22:19:31 UTC cnx-software.com Llama Share 7

The user enabled ZRAM on their Ubuntu 24.04 laptop to improve performance without upgrading memory, replacing the older zram-config utility with zram-tools. They also confirmed ZRAM is enabled by default on their Raspberry Pi 5 with 2GB of RAM, and suggested checking ZRAM on other single-board computers.