Here is your evening HN briefing — thirty stories collected from today’s front page, organized by theme with concrete summaries and discussion highlights.

Security & Privacy

Google Cloud Fraud Defence is just WEI repackaged

Summary: Google Cloud Fraud Defence is just WEI repackaged | Private Captcha Use cases Form protection GDPR compliance Secure WordPress Rate limiting Accessibility Features Smart difficulty scaling Custom rules EU-only endpoints Audit logs Platform API Usage statist….. Google killed Web Environment Integrity in 2023 after standards bodies objected… Today, three years later, the same device attestation mechanism launched as a commercial product… The open web survived because no single company could decide which hardware was legitimate enough to use it..

HN Discussion: I saw this coming from miles away… Whether it’s AMP or manifest 3 or android source shenanigan or attempts to replace cookies with their FLOC nonsense or this…Google is rapidly turning into a malicious force when it comes to the open internet.

A web page that shows you everything the browser told it without asking

Summary: I is what the world did while you were here… IV · April 2026 Created by Matt , at Rise Up Labs … — Tell Someone — What this page knew A web page just told me everything it learned about me without asking… 𝕏 (Twitter) Bluesky LinkedIn Facebook Reddit WhatsApp Copy Link Close — A Note On What You Gave — Sources & Confessions Every observation on this page came from your own browser, in the first milliseconds after you arrived..

HN Discussion: * I’m not in that city… I am once again asking privacy advocates to try sounding normal for once.

Podman rootless containers and the Copy Fail exploit

Summary: Podman rootless containers and the Copy Fail exploit About Microblog Podman rootless containers and the Copy Fail exploit May 4, 2026 Contents An overview of rootless containers Rootless rootful User namespaces Privileged operations Rootless non-root Bind m….. This vulnerability allows a local unprivileged user to obtain a root shell by running the Python script shared by the author… This exploit can be used to exploit Linux containers, which are widely used to run all sorts of things: public-facing services, development environments, continuous integration jobs, etc… A container exploited with Copy Fail can used quite effectively for many kinds of attacks..

HN Discussion: Anyone who sees Copy Fail and chooses to focus on the way the example exploit happens to gain root is just showing how unimaginative they are.

Show HN: Git for AI Agents

Summary: GitHub - regent-vcs/re_gent: Git for AI coding agents… · GitHub Skip to content Navigation Menu Toggle navigation Sign in Appearance settings Platform AI CODE CREATION GitHub Copilot Write better code with AI GitHub Spark Build and deploy intelligent apps GitHub Models Manage and compare prompts MCP Registry Ne….

HN Discussion: People in this thread seem to be too focused on the agent creating a git log..

Hackers breach JDownloader’s website to serve malware-laced downloads

Summary: If you downloaded this popular software recently, you might have installed malware - Neowin Neowin® Login Sign up Facebook Twitter Follow @neowinfeed YouTube Bluesky RSS Log in Sign up News News Software Microsoft Gaming Guides Closer Look Windows 10 Window….. Apple now wants proof you’re a student 32 minutes ago Get Microsoft Visio 2024 Professional for Windows now at 90% off 1 hour ago Prime members get Mafia II: Definitive Edition and 10 more games to keep in May 2 hours ago View all recent news Microsoft’s up….

HN Discussion: I wish there was finally a decent alternative to this junk… I remember using download managers back in the day, and by “back in the day” I mean dial-up (and maybe early DSL)… > As there has been a question about updates.

DeepSeek 4 Flash local inference engine for Metal

Summary: GitHub - antirez/ds4: DeepSeek 4 Flash local inference engine for Metal · GitHub Skip to content Navigation Menu Toggle navigation Sign in Appearance settings Platform AI CODE CREATION GitHub Copilot Write better code with AI GitHub Spark Build and deploy i….

HN Discussion: Heh, I made something very similar for the Qwen3 models a while back… I’ve tried it out with Claude Code on my existing codebase and it seemed to hold its weight (despite being the 2-bit quant)..

Tech Tools & Projects

Ask HN: We just had an actual UUID v4 collision…

Summary: This morning, our database flagged a duplicate UUID (v4)… I checked, thinking it may have been a double-insert bug or something, but no… The original UUID was from a record added in 2025 (about a year ago), and today the system inserted a new document with a fresh UUIDv4 and it came up with the exact same one: b6133fd6-70fe-4fe3-bed6-8ca8fc9386cd We’re using this: https://www.npmjs.com/packa….. We’re literally only calling: import { v4 as uuidv4 } from “uuid”; const document_id = uuidv4(); …

HN Discussion: This is surprisingly common… Ultimately it comes down to your entropy source… Some discussion here: https://github.com/uuidjs/uuid/issues/546 Eg: > FWIW, I just tested crypto.getRandomValues() behavior on googlebot and it is also deterministic(!).

AI & Tech Policy

Cartoon Network Flash Games

Summary: Cartoon Network Flash Games - Web Design Museum Menu Websites Galleries Early Websites Web Design in the 90s Golden Age of Web Design CSS Layout Pioneers All Websites Flash Websites Flash Websites in the 90s Flash Websites in the early 00s Flash Websites in….. Home > Flash Game Exhibitions > Cartoon Network Flash Games Scooby-Doo: Scooby Snapshot 2001 Batman: The Animated Series: The Riddler’s Secret Identity Inventor 2002 Cartoon Network: Food Bash 2002 Codename: Kids Next Door: Operation S.T.A.R.T.U.P… 2002 Ed, Edd n Eddy: Spin Stadium 2002 Scooby-Doo: Ask….

HN Discussion: It’s just nostalgia I’m sure but damn if these didn’t coincide with the peak era of the web as a user.

An Introduction to Meshtastic

Summary: Introduction | Meshtastic Skip to main content Meshtastic Docs Blog Downloads Flasher English English Search Donate GitHub About Introduction Overview Contributing FAQs Getting Started Configuration Hardware Software MeshtasticD Community Development Legal….. This project is 100% community driven and open source!.. 14:23 MESHTASTIC Primary Channel Send a message to the mesh Client Client Client Client Router Client Client Client meshtastic-cli $ meshtastic —listen Listening for messages… LoRa Bluetooth WiFi USB Features ​ Long range ( 331km record by MartinR7 & alleg ) No phone required for mesh communication Decentralized communication - no dedicated router required Encrypted communication Excellent battery life Send and receive text messa….

HN Discussion: Meshtastic is really cool!.. I had never heard of this before, then last week I watched a video about it and was hooked.

Apple, Intel have reached preliminary chip-making deal

Summary: Article fetch unavailable: HTTPError: HTTP Error 401: HTTP Forbidden.

HN Discussion: Wasn’t the whole apple silicon thing about Intel being unable to keep up?.

Poland is now among the 20 largest economies

Summary: Poland is a model for economic growth | AP News Menu World SECTIONS Iran war Russia-Ukraine war Español China Asia Pacific Latin America Europe Africa TOP STORIES US fires on and disables 2 more Iranian tankers as tensions rise in the Strait of Hormuz Starm….. The Afternoon Wire Get caught up on what you may have missed throughout the day… SECTIONS Immigration Weather Education Transportation Abortion LGBTQ+ Notable Deaths TOP STORIES Judge rules Trump administration’s cancellation of humanities grants was unconstitutional A faint meow in the rubble of a Mississippi tornado leads to a stunnin….. See All Newsletters AP QUIZZES Test Your News I.Q..

HN Discussion: The story is longer: Poland was the first country to make a remarkable peaceful transition from a bankrupt, failed Soviet satellite state… I love the polish, but credit where credit is due: „Poland is the largest beneficiary of EU funds 2014-2020, with one in four euro going to Poland“ https://www.gov.pl/web/funds-regional-policy/poland-at-the-f…

Rumors of my death are slightly exaggerated

Summary: AI hallucinations are getting ambitious… A couple people recently emailed, asking whether the Klein bottle business was still operating after my death… “I ain’t dead yet.” After some digging, I discovered the source: an AI-generated review of The Cuckoo’s Egg circulating on Facebook… Alongside the usual synthetic praise and fabricated details, it confidently announced that I had died in May 2024..

HN Discussion: Thank you for the update, Cliff.

US Government releases first batch of UAP documents and videos

Summary: Article fetch unavailable: HTTPError: HTTP Error 403: Forbidden.

HN Discussion: Several of these look like balloons and birds… They really made a sci-fi themed webdesign for this.

Bjarne Stroustrup: How do I deal with memory leaks?

Summary: Stroustrup: C++ Style and Technique FAQ home | C++ | FAQ | technical FAQ | publications | WG21 papers | TC++PL | Tour++ | Programming | D&E | bio | interviews | videos | quotes | applications | guidelines | compilers Bjarne Stroustrup ‘s C++ Style and Techn….. If you have better questions or comments on the answers, feel free to email me (bs at cs dot tamu dot edu)… Please remember that I can’t spend all of my time improving my homepages… I have contributed to the new, unified, isocpp.org C++ FAQ maintained by The C++ Foundation of which I am a director..

HN Discussion: The discussion thread was developing at time of publication.

GeoJSON

Summary: GeoJSON G eo J SON GeoJSON is a format for encoding a variety of geographic data structures… { “type” : “Feature” , “geometry” : { “type” : “Point” , “coordinates” : [ 125.6 , 10.1 ] }, “properties” : { “name” : “Dinagat Islands” } } GeoJSON supports the following geometry types: Point , LineString , Polygon , MultiPoint , MultiLineString , and Mul….. Geometric objects with additional properties are Feature objects… Sets of features are contained by FeatureCollection objects..

HN Discussion: One task where GeoJSON falls down is simplification of a group of polygons with common boundaries, e.g… I’ve applied GeoJSON (among many other GIS tech) for mapping and monitoring tens of thousands of warehouse robots… I’ve had nothing but problems using GeoJson..

The surprisingly complex journey to text-selectable client-side generated PDFs

Summary: SDocs SmallDocs SDocs SD Drop .md to load B I S </> H1 H2 H3 H4 H5 ¶ — Commenting as: Select text, or click the beside a block, to comment 0 / 0 with comments Local only rows aren’t included in shared sdocs Styles General Font family Base size px Line heigh….. Background ↺ Text ↺ ▶ Code Background ↺ Text ↺ ▶ Blockquote Border ↺ Background ↺ Text ↺ ▶ Charts Background ↺ Text ↺ Accent ↺ Palette Monochrome Complementary Analogous Triadic Pastel Warm Cool Earth Headers ▶ General h1–h4 Font family Same as body Size sc….

HN Discussion: Tangentially related, one of the most underappreciated projects for print media and PDF generation is paged.js… I vibecoded a pdf replacement at work, sort of.

David Attenborough’s 100th Birthday

Summary: David Attenborough: King and Queen lead tributes for 100th birthday Skip to content Home News Sport Business Technology Health Culture Arts Travel Earth Audio Video Live Home News Sport Business Technology Health Culture Arts Travel Earth Audio Video Live W….. The royal couple also shared photographs of Sir David, including one of him with a young Prince Charles and Princess Anne in 1958, in which he is introducing them to Cocky the cockatoo, from his BBC Zoo Quest TV series… The King and Queen wished him a very happy birthday , adding: “Enjoy your special celebration this evening!” The veteran broadcaster and environmentalist has said he was “completely overwhelmed” by messages he had received ahead of his big day, which includ….. PA Media In one of the images shared on the Royal Family’s Instagram account, Sir David introduced Cocky, the cockatoo to Prince Charles with his sister Princess A….

HN Discussion: I’m surprised none of these threads made it to the front page.

ClojureScript Gets Async/Await

Summary: ClojureScript - 1.12.145 Release ClojureScript Overview Reference‍ Tools Guides Community News  clojurescript.org ask.clojure.org 1.12.145 Release 1.12.134 Release 1.12.116 Release 1.12.42 Release 1.11.132 Release 1.11.51 Release 1.10.914 Release 1.10.891….. 1.12.145 Release   1.12.145 Release 07 May 2026 ClojureScript Team We’re happy to announce a new release of ClojureScript… If you’re an existing user of ClojureScript please read over the following release notes carefully… Async Functions Now that ClojureScript targets ECMAScript 2016 we can carefully choose new areas of enhanced interop..

HN Discussion: I noticed borkdude posted this thread and he is listed as a contributor for this release… Surprised to see Clojure/ClojureScript come up on socials more often all of a sudden… I wish an alternative to JS for the front end would catch on and be something more than obscure…

The map that keeps Burning Man honest

Summary: The map that keeps Burning Man honest Subscribe!.. Not-Ship Charting the age of uncertainty… Courtesy Burning Man May 7, 2026 The map that keeps Burning Man honest Amanda Shendruk At the end of April, I ran a short campaign to find 15 more paying members of Not-Ship… Thank you to the wonderful souls who chose to back this work..

HN Discussion: I’ve done this for a couple years now, cool to see it pop up here.

The Disappearance of the Public Bench

Summary: Article fetch unavailable: HTTPError: HTTP Error 403: Forbidden.

HN Discussion: I also like clean safe unobstructed sidewalks and parks but along with benches, we’ve made a decision… I’d add that we also chose policies that made housing expensive… This is one of the cases in point of Hostile Architecture.

Dithering with CSS

Summary: dithering with css | ikesau.co i <esau dithering with css computers update 2026-05-8: hello hackernews - whoops, yes, i should have filtered out the noise specks… this is not a power or bandwidth saving technique à la low tech magazine … handy if you’re running a site with pictures but you want everything to maintain a consistent aesthetic and colour scheme… might be better to just process the images and save them already dithered, but this way can be customized..

HN Discussion: Wow, my first post that’s frontpaged and it’s the one I put the least effort into… Is this actually dithering?.

QBE – Compiler Back End

Summary: QBE - Compiler Backend QBE compiler backend Intro Docs Users Releases Code QBE is a compiler backend that aims to provide 70% of the performance of industrial optimizing compilers in 10% of the code… QBE fosters language innovation by offering a compact user-friendly and performant backend… The size limit constrains QBE to focus on the essential and prevents embarking on a never-ending path of diminishing returns… Overview The C codebase of QBE is intended to remain hobby-scale and pleasant to hack on..

HN Discussion: Related, there’s Blaise which is a new Object Pascal that uses QBE as its backend.

Agents need control flow, not more prompts

Summary: agents need control flow, not more prompts | brian’s thoughts brian’s thoughts Home Blog agents need control flow, not more prompts 07 May, 2026 Thesis: reliable agents tackling complex tasks need deterministic control flow encoded in software, not increasi….. Imagine a programming language where statements are suggestions and functions return “Success” while hallucinating … Reasoning becomes impossible; reliability collapses as complexity grows… Software scales through recursive composability: systems built from libraries, modules, and functions..

HN Discussion: I wonder if a part of the problem isn’t just the misapplication of LLMs in the first place.

Inventing Cyrillic (2024)

Summary: Article fetch unavailable: HTTPError: HTTP Error 403: Forbidden.

HN Discussion: Oddly, the article doesn’t mention the most interesting part… This is an article with a long introduction and then jumps straight to the point in one, final paragraph: Russia is abusing it for political messaging again.

GPT-5.5 Price Increase: What It Costs

Summary: GPT-5.5 Price Increase: What It Actually Costs | OpenRouter Skip to content OpenRouter / Fusion Models Chat Rankings Apps Enterprise Pricing Docs Posts 5/4/2026 by Justin Summerville GPT-5.5 Price Increase: What It Actually Costs We replicated the cost anal….. GPT-5.5 launched with a 2x price increase over GPT-5.4: input tokens increased from $2.50/M to $5.00/M and output tokens from $15/M to $30/M… OpenAI has also noted that the model is less verbose, producing shorter completions for the same tasks… Just as we did with Opus 4.7 we wanted to know what is the net impact on costs to users by analyzing usage that shifted from GPT-5.4 to GPT-5.5..

HN Discussion: We track performance vs… New model releases are now like new iPhones—mostly imperceivable improvements with a higher price tag… I feel that the recent iterations of LLM haven’t provided an intuitive qualitative leap..

AlphaEvolve: Gemini-powered coding agent scaling impact across fields

Summary: AlphaEvolve: Gemini-powered coding agent scaling impact across fields — Google DeepMind Skip to main content Explore our next generation AI systems Explore models Gemini Gemini Learn, build, and plan anything Nano Banana Create and edit detailed images Gemi….

HN Discussion: This reminds me of Antirez’s “Don’t fall into the anti-AI hype” [0] In a sentence: These foundation models are really good at optimizing these extremely high level, extremely well defined problem spaces (ie multiply matrices faster)… The AI CEOs love to pontificate about AI curing cancer, but it seems like DeepMind is the only one actively working on these research problems, while OpenAI/Anthropic largely chase enterprise/coding revenue… Are Googlers themselves happy using Gemini coding agent instead of Claude Code or Codex?.

Hallucinations Undermine Trust; Metacognition Is a Way Forward

Summary: [2605.01428] Hallucinations Undermine Trust; Metacognition is a Way Forward Skip to main content Learn about arXiv becoming an independent nonprofit… We gratefully acknowledge support from the Simons Foundation, member institutions , and all contributors… Donate > cs > arXiv:2605.01428 Help | Advanced Search All fields Title Author Abstract Comments Journal reference ACM classification MSC classification Report number arXiv identifier DOI ORCID arXiv author ID Help pages Full text Search GO quick links Login….. Yet even in the simplest setting — factoid question-answering with clear ground truth-frontier models without external tools continue to hallucinate..

HN Discussion: The discussion thread was developing at time of publication.

Academic & Research

Brazil’s Pix payment system faces pressure from Visa and Mastercard

Summary: Brazil’s Pix Payment System Faces Pressure from Visa and Mastercard El Ciudadano —> Brazil’s Pix Payment System Faces Pressure from Visa and Mastercard El Ciudadano —> Hazte Socio El Ciudadano International Chile Mexico Venezuela Latin America English Deu….. English Edition / Economy / Latin America / Research —> The Citizen 04/04/2026 3:37pm Comparte esto: Compartir en WhatsApp (Se abre en una ventana nueva) WhatsApp Compartir en X (Se abre en una ventana nueva) X Comparte en Facebook (Se abre en una ventana….

HN Discussion: I can see that Visa and Mastercard are freaking out, not because Pix can take over their business model, but because it can give ideas to other countries doing the same… People underestimate how difficult it was to transfer money before Pix, even between local banks.

Geopolitics & War

Serving a Website on a Raspberry Pi Zero Running in RAM

Summary: Serving a Website on a Raspberry Pi Zero Running Entirely in RAM Home About Posts More… It’s diskless and running entirely from memory!.. My Raspberry Pi Zero silently running in my cold-storage room (with two extra Pis for moral support)… Serving zero.btxx.org This is even more impressive considering the Pi Zero only has 512MB of total memory , ~40MB of which is tied up running Alpine Linux..

HN Discussion: For optimal moral support, have one of the spare Pis holding a sign, maybe “Pi is our guy”.. I have a self hosting Pi Zero W running Gentoo.

PC Engine CPU

Summary: PC Engine CPU | jsgroth’s blog jsgroth’s blog Posts Categories Tags Read More » PC Engine CPU 2026.5.7 2026.5.7 Emulation 2073 10 mins Contents A Turbocharged 6502 Memory Management A Few New Tricks End?.. Some References I’ve been working on a PC Engine emulator (aka TurboGrafx-16) after getting the bug to start looking at a new system, and I’ve found it to be pretty interesting hardware-wise… Originally released in 1987, its hardware is in a sort of awkward spot between the 3rd generation gaming conoles (NES, Sega Master System) and the 4th generation consoles (Genesis / Mega Drive, SNES), though it’s generally grouped with the latter due to fea….. It sold pretty well in Japan, but in North America it couldn’t really compete with the Genesis and Super Nintendo, and it never even released in Europe (officially)..

HN Discussion: The PC Engine CPU is highly underrated… I didn’t grow up with the PC Engine or TurboGrafx, but I did start getting into it after I got the MiSTer… I restored a PC Engine a year or two ago and I also became fascinated by the hardware.

---

Thirty stories from today’s Hacker News front page. New links will appear in tomorrow morning’s brief.