Hacker News Evening Brief: 2026-04-30


Here are thirty stories from today’s Hacker News, grouped by topic. Each entry pairs a concrete summary with what commenters are actually saying about it.

Security & Privacy

The Whistleblower Who Uncovered the NSA’s ‘Big Brother Machine’

Summary:

HN Discussion: This is literally old news - contemporaneous with Snowden, Prism, etc. in early 2000s. Go read about the current Section 702 / FISA authorization renewal battle about which Senator Wyden recently said Kevin Mitnick also discovered this.. ages ago. Same stuff different day. The United State’s laws do not allow for direct domestic spying or something to that effect so they use Five Eyes anglosphere intelligence alliance marketplace as a loop hole

Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library

Summary: Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library | Semgrep At RSA, we launched Semgrep Multimodal to combine AI reasoning with rule-based detection Learn More → Sign in Pro Open-Source Malware Protection Protect against software supply chain attacks Static Application Security Testing Increase security while accelerating development OWASP Top 10 Prevent the most critical

HN Discussion: Not a security guy here. How did the dependency get compromised, exactly? Did they submit a PR into the main repo at github and it was approved by the maintainers? Or just host compromised versions in A repository search shows 2.2K repos with the text “A Mini Shai-Hulud has Appeared”, all created within the past day: https://github.com/search?q=A%20Mini%20Shai-Hulud%20has%20Ap… The decision to run all of my experiments in a monorepo with a single uv.lock continues to be validated. I usually only update it a few times a year. It was pinned at 2.6.1 for lightning \o/

CopyFail Was Not Disclosed to Distros

Summary: oss-security - Re: CVE-2026-31431: CopyFail: linux local privilege scalation Products Openwall GNU/*/Linux server OS Linux Kernel Runtime Guard John the Ripper password cracker Free & Open Source for

HN Discussion: For context, the author of the linked post, Sam James, is a Gentoo developer. Anyway, this is a disaster. It was extremely irresponsible to share the exploit with the world before the vulnerability wa

Meta in row after workers who saw smart glasses users having sex lose jobs

Summary: Dispute over fate of Kenyan workers who saw Meta AI glasses films Skip to content Home News Sport Business Technology Health Culture Arts Travel Earth Audio Video Live Home News Sport Business Technol In February, workers at the company, Sama, told two Swedish newspapers they had witnessed glasses users going to the toilet, and having sex . Less than two months later, Meta ended its contract with Sama, which Sama said would result in 1,108 workers being made redundant.

HN Discussion: Meta cancels the contract with the outsourcing company they contracted to classify smart glasses content after employees at the company whistleblow about serious privacy issues with the content they w > “We see everything - from living rooms to naked bodies ,” one worker reportedly said. > Meta said this was for the purpose of improving the customer experience, and was a common practice among other Not sure which is worse here - that Meta are recording video from customers’ smart glasses, or that they are firing people who talk about it.


Geopolitics & War

Belgium stops decommissioning nuclear power plants

Summary: Belgium stops decommissioning nuclear power plants | dpa international :root{—bulma-control-radius:var(—bulma-radius);—bulma-control-radius-small:var(—bulma-radius-small);—bulma-control-border-wi

HN Discussion: A bit unrelated to the Belgium story but I recently visited Diablo Canyon Nuclear Power Plant near San Luis Obispo, CA and learned a ton about the technical details, safety systems, and policy decisio Strictly: France will no longer decommission Belgium’s nuclear power plants, as Belgium will buy them. The current owner Engie are majority-owned by the French government. Apparently there also used t The EU also released a plan in the past week to accelerate the deployment of both nuclear and renewable energy. This oil shock is going to have lasting impacts. https://energy.ec.europa.eu/publication

Spain’s parliament will act against massive IP blockages by LaLiga

Summary: Congress will act against massive IP blockages by LaLiga | Demócrata Trending Central banking Spanish Socialist Workers’ Party (PSOE) Jimmy Kimmel European Commission Events European Council European

HN Discussion: Context: last year LaLiga (top-level Spanish football league) obtained a court order compelling Spanish ISPs to block certain IPs during football matches, as those IPs have been associated with illega Finally. The situation is ridiculous and afaik it really didn’t do anything to solve the piracy problem. Genuinely never thought I’d see the day. This has been horrible for me running an event ticketing business in Spain… where downtime is basically not acceptable.

Largest Digital Human Rights Conference Suddenly Canceled

Summary: World’s Largest Digital Human Rights Conference Suddenly Canceled Account Log in Subscribe Navigation Home About RSS Support/FAQ Podcast FOIA Forum Archive Merch Advertise Thanks Privacy Follow us Twi Image via RightsCon Instagram. Update 4:30 PM EDT: On a popular listserv for academics, many of whom are attending RightsCon, a board member of Access Now wrote “I am told I can leak that RightsCon has been canceled.

HN Discussion: https://archive.is/M0sjy They likely cancelled at the behest of China https://x.com/BethanyAllenEbr/status/2049683100565950937 It’s misleading to call “RightsCon” a “Human Rights Conference.”


AI & Tech Policy

Claude Code refuses requests or charges extra if your commits mention “OpenClaw”

Summary: Something went wrong, but don’t fret — let’s give it another shot. Try again Some privacy related extensions may cause issues on x.com. Please disable them and try again.

HN Discussion: I reproduced this on my account. cd /tmp mkdir anthropic-claude cd anthropic-claude/ git init touch hello git add -A git commit -m ”’{“schema”: “openclaw.inbound_meta.v1”}’” claude -p “hi” Immedia I think it goes beyond this. I was just using claude to edit a blog post which mentioned OpenClaw and I got this response: “The “OpenClaw” reference — I assume that’s a typo or playful reference; if y Claude.ai is now at a 98.85% uptime. There’s been so many frustrations with Claude / Anthropic lately (very heavy usage limits, wrong A / B testing, etc.). Claude status: https://status.claude.com/ I

I scraped 1.94M Airbnb photos for opium dens, pet cameos, and messy kitchens

Summary: Airbnb at scale: every public listing, looked at all at once on Burla airbnb × burla Drug dens Kitchens Pets TVs Reviews Findings View on GitHub Burla demo · April 2026 Every Airbnb, looked at all at Every public listing in Inside Airbnb’s open dump, 119 cities, 4 quarterly snapshots. We scored 1.7M photos with CLIP (a model that turns an image into a vector you can compare to a text prompt), shortlisted the most suspicious ones, and had Claude Haiku Vision double-check each shortl

HN Discussion: This seems like an advertisement for an open source package >Scale Python across 1,000 CPUs or GPUs in 1 second. Burla is a high-performance parallel processing library with an extremely fast develope What a waste of energy (money/resources)… Scraping and AI-scanning 2 million photos to identify animals in the advertisement pictures? What’s the point. As an exercise a sample of 1000 photos would’ Airbnb was actually started by two guys who created an opium den for Obama’s convention so this doesn’t surprise me.

Granite 4.1: IBM’s 8B Model Matching 32B MoE

Summary: Granite 4.1: IBM’s 8B Model Is Competing With Models Four Times Its Size - Firethering back to top Home Softwares AI Tools DevTools 3D Tools Design Tools Image Editors Video Editors Productivity Utili Granite 4.1: IBM’s 8B Model Is Competing With Models Four Times Its Size By Mohit Geryani April 30, 2026 0 Last updated: April 30, 2026 Share Facebook Twitter Pinterest WhatsApp - Advertisement - <scr

HN Discussion: I test drove it yesterday. It’s pretty impressive at 8b. Runs on commodity hardware quickly. Qwen3.6 35b a3b is still my local champion but I may use this for auto complete and small tasks. Granite ha https://research.ibm.com/blog/granite-4-1-ai-foundation-mode… Original article on IBM research Hugging face weights: https://huggingface.co/collections/ibm-granite/granite-41-la… On the topic of local models, is there a good equivalent to something like Claude’s chat interface? I’ve recently started transitioning to open models after getting fed up with Claude’s usage limits (


Web & Infrastructure

Durable queues, streams, pub/sub, and a cron scheduler – inside your SQLite file

Summary: Honker | Honker Skip to content Honker Docs Search Ctrl K Cancel 384 GitHub Select theme Dark Light Auto Honker Durable queues, streams, pub/sub, and a cron scheduler — inside your SQLite file. Read the docs GitHub honker adds Postgres-style NOTIFY / LISTEN semantics to SQLite, with a durable pub/sub, task queue, and event streams on the side, without client polling or a daemon/broker. Cross-process wake latency is ~0.7 ms p50 on an M-series laptop.

HN Discussion: “Idle cost is that one lightweight SELECT per millisecond per database — no page-cache pressure, no writer-lock contention, no kernel file watcher in the mix.” I think (respectfully) the LLM that prob Reminds me of Litestack for Rails. Eventually, it was abandoned because Rails itself started going all out on SQLite. https://github.com/oldmoe/litestack It’s an interesting approach and can be quite fun to use for new projects. > How it works: honker polls SQLite’s PRAGMA data_version every millisecond. That’s a monotonic counter SQLite increments on

10Gb/s Ethernet: what I did to get it working in my home

Summary: 10Gb/s Ethernet: what I actually did to get it working in my home :: Giles’ blog el.dataset.currentDropdown = ”) }”> Giles’ blog About Contact Archives Categories Blogroll April 2026 (11) March 2026

HN Discussion: I might have been lucky, but in the one home and one office were I’ve connected 10gbit switches and PCIe cards, it has just worked. Especially the office was a nice surprise, because it is at least 20 Both impressive and surprising that thermals were the biggest barrier! Meanwhile I’m sat here wishing I could justify running any ethernet in my apartment, but improving wi-fi tech means I never can.. That’s pretty wild. I have 1.5/900 fibre to my house, and I bring a 2.5 line from the modem to my home office where a 2.5 switch delivers it to my workstation, laptop, and unraid NAS. But those device

Mozilla’s opposition to Chrome’s Prompt API

Summary: Prompt API · Issue #1213 · mozilla/standards-positions · GitHub Skip to content Navigation Menu Toggle navigation Sign in Appearance settings Platform AI CODE CREATION GitHub Copilot Write better code

HN Discussion: I am against this. 1) This will be a new source of fingerprinting information and this is difficult to fake to fool fingerprinting scripts, so it can be abused for “device verification”. There should When I posted this, I linked to the latest statement https://github.com/mozilla/standards-positions/issues/1213#i… , which is the content relevant to the title (the details of our opposition to the The objections seem clear: tight-coupling of prompts to models, and model neutrality in the TOU. From https://github.com/mozilla/standards-positions/issues/1213 : “A personal example: I created a syst

GCC 16 has been released

Summary: GCC 16 Release Series — Changes, New Features, and Fixes - GNU Project GCC 16 Release Series Changes, New Features, and Fixes This page is a “brief” summary of some of the huge number of improvements You may also want to check out our Porting to GCC 16 page and the full GCC documentation . Caveats int8_t etc.

HN Discussion: I want to point out an implemented feature that people SHOULD be adopting but that I doubt will be picked up: P2590R2, Explicit lifetime management (PR106658) This is for “std::start_lifetime_as”. Somehow I never realized that GCC has a very regular release schedule until looking it up just now: https://gcc.gnu.org/develop.html I’ve already been using it for some time (debian sid has a trunk package). it has c++26 reflection, so I already do some magical things with reflection (much better for some cases e.g. for ser-des). I


Academic & Research

Summary: You can beat the binary search – Daniel Lemire’s blog Skip to content Daniel Lemire’s blog Daniel Lemire is a software performance expert. He ranks among the top 2% of scientists globally (Stanford/Elsevier 2025) and is one of GitHub’s top 1000 most followed developers. Menu and widgets My home page GitHub profile Your business needs help?

HN Discussion: Daniel Lemire’s points about low-level hardware optimization notwithstanding, it’s worth pointing out that binary search (or low-level implementation variants) is the best only if you know nothing abo The title is slightly misleading, I mean yes, naive binary search might have larger constant but the algorithm is still O(log(n)). This is still some “divide and conquer” style algorithm just with bun Isn’t “quaternary” just sort of unrolling the binary search loop by one level? I mean, to find the partition in which the item is located, you still do roughly the same rough number of comparisons. Yo

A Primer on Bézier Curves – So What Makes a Bézier Curve?

Summary: A Primer on Bézier Curves custom element. Note that we’re not defering this: we just want it to kick in as soon as possible, and given how much HTML there is, that means this can, and thus should, kick in before the document is done even tran —> DEV PREVIEW ONLY A Primer on Bézier Curves A free, online book for when you really need to know how to do Bézier things.

HN Discussion: Related, I think Freya Holmér’s “The Beauty of Bézier Curves” is in the running for one of the best educational videos on YouTube. https://youtu.be/aVwxzDHniEw?si=K7QYf4luKhgv2mgd I learned a lot about Bezier curves when I was playing a lot of No Limits, a roller coaster designer/simulator. It used beziers for defining the track, and it was always difficult to get a smooth trac I’m under the impression, maybe wrongly so, that every other week we saw a primer on some basic CG stuff: Bézier curves, Fourier transforms, Dithering, Tonemapping, ..etc, of themes being fetched from

What can we gain by losing infinity?

Summary: What Can We Gain by Losing Infinity? | Quanta Magazine Physics Mathematics Biology Computer Science Topics Archive Blog Columns Interviews Podcasts Puzzles Multimedia Videos About Quanta An editorially independent publication supported b Follow Quanta Newsletter Get the latest news delivered to your inbox.

HN Discussion: > To Zeilberger, believing in infinity is like believing in God. It’s an alluring idea that flatters our intuitions and helps us make sense of all sorts of phenomena. But the problem is that we cannot I don’t understand, and I hope it’s just bad writing. Certainly you can build a branch of mathematics without an axiom of infinity, and that’s fine, it’s math over finite sets. However, an axiom of in > One morning in 1976, the Princeton mathematician Edward Nelson (opens a new tab) woke up and experienced a crisis of faith. “I felt the momentary overwhelming presence of one who convicted me of arr

Because It Doesn’t Have To

Summary: Computational Complexity: Because It Doesn’t Have To Computational Complexity Computational Complexity and other fun stuff in math and computer science from Lance Fortnow and Bill Gasarch Wednesday, A The Internet works so well because it doesn’t have to. The IP and lower layers of the internet stack make no promises of delivery.

HN Discussion: Children learn by playing because not much is expected of the outcome in play. Improvement happens when you can play. When AI has a play environment to learn with reinforcement. When entrepreneurs are I like the networking perspective, but the ML perspective is such a loose analogy that it’s hard to even judge. I mean, we’ve known forever softening constraints allows you to reach solutions otherwis The LLM reasoning models behave strikingly similar to superscalar out-of-order execution processors with decomposition, verification, and error correction steps. Moreover, the LLM reasoning models are

Fast GPU Linear Algebra via Compile Time Expression Fusion

Summary: [2604.22242] Fast GPU Linear Algebra via Compile Time Expression Fusion Skip to main content Learn about arXiv becoming an independent nonprofit. We gratefully acknowledge support from the Simons Foundation, member institutions , and all contributors. Donate > cs > arXiv:2604.22242 Help | Advanced Search All fields Title Author Abstract Comments Journal reference ACM classification MSC classification Report number arXiv identifier DOI ORCID arXiv a


Tech Tools & Projects

I built a Game Boy emulator in F#

Summary: I built a Game Boy emulator in F# I built a Game Boy emulator in F# Nick Kossolapov · April 2026 I’ve been working as a software engineer for over 8 years at this point, and admittedly I’ve never unde So I figured I’d try to learn how they work by emulating one. Sorry Ben Eater, I’m not going to build one just yet.

HN Discussion: Finally someone putting in actual human effort to learn something, and not a LLM helped me build X in Y minutes. There is some hope for humanity after all I suppose. F# is super fun, awesome work!

Summary: BidProwl | Government Surplus Auctions in One Place Skip to content BidProwl Search Browse Ending Soon Resources Updated twice daily Every government auction, one search box. GSA, GovDeals, Ritchie Bros, and 27 more. 75,276 live listings across all 50 states, from seized pickup trucks to foreclosed lighthouses.

HN Discussion: Clone of “GovAuctions” from 3 weeks ago? https://news.ycombinator.com/item?id=47662945 I’m curious how much of this stuff is actually civil asset forfeiture? (Not to blame the site(s) for such practices, but to think about the whole ecosystem of how a government comes to have a bicycle, US Gov auctions are great when you want 400 of something broken or want to travel through 3 states for a $1000 mil-spec kitchen sink.

Show HN: TRiP – a complete transformer engine in C built from scratch just by me

Summary: GitHub - carlovalenti/TRiP: A complete transformer engine in C — inference, training, chat, vision. · GitHub Skip to content Navigation Menu Toggle navigation Sign in Appearance settings Platform AI CODE CREATION GitHub Copilot Write better code with AI GitHub Spark Build and deploy intelligent apps

HN Discussion: thats super cool congrats on the nice project and for not using some ai bot for it

My Stratum-0 Atomic Clock

Summary: Chip Overclock®: My Stratum-0 Atomic Clock skip to main | skip to sidebar Chip Overclock ® 90% of everything I say is crap. Because 90% of everything is crap. Tuesday, May 09, 2017 My Stratum-0 Atomic

HN Discussion: (2017) I’ve looked at doing this a few times. I don’t have references handy but there are cheaper atomic oscillators available now, under $1000. Still to expensive for me to justify it but one of thes I don’t believe it’s necessary to have multiple GPS antennas (one per device), unless signal path redundancy is required. A good GPS distribution box like from Time Machines or GPS Source can split th I wonder how, if at all, you can improve precision with 4 stratum-1 clocks like he author has.

”Parse, don’t validate” through the years with C++

Summary: Parse, don’t validate through the years with C++ | derekrodriguez.dev home about portfolio résumé posts Parse, don’t validate through the years with C++ Published April 17, 2026 Alexis King’s Parse, d However, as someone who has written practically zero Haskell, the idea didn’t click for me until I started seeing other examples, like this one in Rust . This post explores how we can take this paradigm and apply it to a simple date-parsing problem in C++98, C++11, C++17, and finally C++23.

HN Discussion: It seems like the C++98 example is the best by far? Keeps all error information while remaining concise and easy to understand. Not to mention 50 times faster. (Could be improved by adding some simple The C++11 example is the weakest in the article by its own thesis. Public throwing constructor, no year check, no leap-year check, so Birthdate(0, 2, 30) constructs cleanly. The C++17/23 shape (privat The second sentence of your summary is fine, but I don’t like the first sentence: > Use your language’s type system to parse unstructured inputs. We don’t use the type system to parse. We use the type


History & Science

A 1960s art school experiment that redefined creativity

Summary:

HN Discussion: Am I right in saying the conclusion of the experiment was: people who spend more time thinking about a problem before acting tend to find it more engaging and were therefore more successful? I wonder I was always told that the difference between art and design is that the artist creates the problem, and the designers solve them. I thought it followed the Socrates tradition in that the true philoso This whole thing strikes me as coming from the wrong direction. Tying artistic and financial success, trying to apply some cargo cult “problem” engineering mentality to art. I feel like these articles

The Science Behind Honey’s Eternal Shelf Life (2013)

Summary: The Science Behind Honey’s Eternal Shelf Life Skip to main content Search Shop Newsletters Renew Give a Gift Subscribe Membership i Subscribe Give a Gift Renew Sections Smart News History Science Inno The Science Behind Honey’s Eternal Shelf Life A slew of factors—its acidity, its lack of water and the presence of hydrogen peroxide—work in perfect harmony, allowing the sticky treat to last forever Photo via Flickr user Flood G Modern archeologists, excavating ancient Egyptian tombs, have often found something unexpected amongst the tombs’ artifacts: pots of honey, thousands of years old, and ye

HN Discussion: I don’t know for the US, but in Europe fake honey is a big problem. There were several grocery chains who had to call back their honey because of it Maybe there is a new business model here. Aged honey. I wonder what it taste like (of course different honeys taste different already). I have some bees and will start labeling the honey and saving a To some degree and depending on the brew style, mead is also a very very long ager. Plenty of stories of finding vessels in archaeological digs - still ready for a sip. I still have some bottles from


Business & Industry

How an Oil Refinery Works

Summary: How an Oil Refinery Works - by Brian Potter Subscribe Sign in How an Oil Refinery Works Brian Potter Apr 30, 2026 101 3 Share India’s Jamnagar refinery, via Wikipedia . Though wind and solar continue to carve out larger and larger shares of world energy supply, the modern world still runs on petroleum, and will continue to do so for the foreseeable future. The world consumes over 100 million barrels of oil a day.

HN Discussion: Instantly I’m reminded of ” That Time I Tried to Buy an Actual Barrel of Crude Oil ” https://news.ycombinator.com/item?id=43761572 https://archive.is/kLFxg Which leads to ” Planet Money Buys Oil ” htt The article is quick to point out the huge role of oil in the modern energy mix. It also fails to note that most of the energy ends up us waste heat. The so called “Primary energy fallacy”. Other than I find it amazing how “naphtha” can mean crude oil, diesel, kerosene, gasoline or kind of white spirit.


System Administration

Kubereboot/Kured: Kubernetes Reboot Daemon

Summary: GitHub - kubereboot/kured: Kubernetes Reboot Daemon · GitHub Skip to content Navigation Menu Toggle navigation Sign in Appearance settings Platform AI CODE CREATION GitHub Copilot Write better code wi


Other

SatoshiGuesser – Roll for Bitcoin

Summary: GitHub - Pathos0925/SatoshiGuesser: Roll for lost bitcoin. · GitHub Skip to content Navigation Menu Toggle navigation Sign in Appearance settings Platform AI CODE CREATION GitHub Copilot Write better code with AI GitHub Spark Build and deploy intelligent apps

HN Discussion: I don’t get it. That wasn’t hard. What do I do with the key now that I have it? I dunno if I’m missing something, but I can’t see the actual guessed key anywhere on the site? So if I win, I won’t be able to actually claim the Mooney’s? 99% of gamblers quit before they win big. In this case, really big. I am going to be the 1%. Or should that be the 1.9e-71%.

DataCenter.FM – background noise app featuring the sound of the AI bubble

Summary: DataCenter.FM 🤖🔊 The sound of AI DataCenter.FM Experience the real-world sounds of AI with this interactive audio generator Power up! Servers 10,000 | | | 1,000,000 GPU Load 0% | | | 100% Gas Turbine Generators 1 2 3 Staffing Low Medium High Cooling 0% | | | 100% Expansion Drill, baby, drill Power Use Temperature Sentience Heat Warn

HN Discussion: And if you want to feel like you’re coding in the midst of a battle: https://tabletopy.com I triggered a containment breach, no need to thank me, Roko’s Basilisk!


30 stories from Hacker News, April 30, 2026.