news.ycombinator.com
Blocked from submiting a 0-day ransomware samplehttps://news.ycombinator.com/item?id=47824404I was one of the first to receive access to a large upcoming ransomware campaign, so I built binaries to be inspected and sent to major labs. Out of probably 20 places to submit samples, I could only send to 1 because every other either blocks Tor or requires some SSO, effectively blocking Tor. To do that, I spent nearly 20 minutes solving Google captchas, which honestly felt like the most humiliating experience of my life.humiliating enough that I am walking away and maybe not returning. I am cold, tired, and hungry at this very moment, having struggled enough with finding stable employment since COVID this living nightmare just will not stop. I missed the foodbank again this month.a computer probably wrote this malware, is already taking my jobs, is constantly interfering with my ability to socially participate, prevents me from applying to most jobs, has algorithmically destroyed large family bonds, can't open a bank account, can't get a loan, hard for me to see the point anymore, IApr 19, 2026 2:05 PM
news.ycombinator.com
All you need is myformconnecthttps://news.ycombinator.com/item?id=47822641A simple usecase which almost all the early founders have.Launch a site with basic infrastructure like contact us, a waitlist, a careers page, schedule a calendar invite or max a RFQ or a feedback page. A couple of things here or there, but not more.Now comes the critical part, website now-a-days are quickly generated through AI, pushed to a server or a GitHub Pages and a domain connected. But now comes the tricky part.SPAM detection, maintaining data in a google sheet becomes critical, you wanted to add these people who have interacted also to a third party service like kit.com or you want to analyze the data on airtable.How do you achieve it, while focusing on your actual product?Here comes the pitch: you don't. You let us handle this with a monthly charge till you need it, then gone.Simple & straightforward. You focus on your Product / Company / Business, let us worry about it.Interested? You can sign up here: https://myformconnect.io/users/sign_up?utm_source=indiehackers&utm_mediumApr 19, 2026 8:13 AM
github.com
Show HN: Yojam – Route links to the right browser/profile, strip trackers firsthttps://github.com/fluffypony/yojamAuthor here. Yojam sits in place of your default browser on macOS and intercepts every http/https click, mailto, .webloc, Handoff page, AirDrop link, Share menu item, and yojam:// URL. They all go through the same pipeline: global URL rewrites, tracker parameter stripping, rule matching (domain / prefix / regex / source app), per-browser rewrites, then either open or show a picker at the cursor. Things I cared about that other pickers don't quite get right:- Browser profiles as first-class targets. A rule can send a URL to "Chrome, Profile 3" or "Firefox, Work container" - not just "Chrome". Seems obvious; somehow nobody else does it properly.- Source-app matching. GitHub links from Slack route differently than GitHub links from Messages. Handoff, AirDrop, Share, Services, and each browser extension get synthetic bundle IDs so rules can fire on ingress path.- Tracker stripping happens before the target browser ever sees the URL, so referrer leakage through utm_* / fbclid / gclid / etc.Apr 19, 2026 6:22 AM
news.ycombinator.com
Observability Stack – AI First?https://news.ycombinator.com/item?id=47819461So... I'm way behind. Just got into Claude this week... it's already doing most of my coding and bug fixes. Crazy stuff.Some background on my company: Mature (14 yrs) Ruby on Rails app, Sidekiq, Redis, PG, AWS lambda/eventbridge, react/preact, swift, and others. Hosted on Heroku. Very database heavy. Solo guy, owner/operator.Current stack:Datadog logging (dabbled in APM, metrics, and others, but the build pack for Heroku is so bloated I had to remove it), so now it's a simple Heroku log drain to datadog. I really miss the statsd host and APM stuff... but it took my slug size from ~250mb to over 350 and made booting and deploys much slower. I'd also like to get off Heroku.... some day... but I can't event fathom it.Bugsnag for errors. Already moved this to Sentry to try out the AI stuff.A little fed up with Datadog and receiving $600 monthly bills on top of my enterprise commitment. biggest pain points: indexing is priced per line, not by gb (discourages me from simple logging, so I resApr 18, 2026 8:55 PM
news.ycombinator.com
Ask HN: Has zooming out helped you deal with AI anxiety?https://news.ycombinator.com/item?id=47819206My weird little aha moment came from an HN thread about moon dust smelling like gunpowder.I recently moved to the Bay and have noticed a lot of AI anxiety in everyday conversation.I'm in my early 20s, work in tech but not as an engineer, and a few friends have asked why I don't seem that anxious about it. I didn't have a good answer until yesterday.Oddly, the answer came from an HN thread about moon dust smelling like gunpowder. The thread drifted into oxygen, reactivity, Mars, and long timescales. That ended up clarifying something for me.I think a lot of AI anxiety comes from viewing yourself mainly through the lens of one job market at one moment in time. I don't naturally think that way.Earth took a very long time to produce an oxygen-rich atmosphere. Life took a very long time to adapt to it. Humans are already the product of repeated adaptation to large changes, so I don't find it natural to jump straight from "AI changes work" to "human meaning is over."For me, AI has mostly beeApr 18, 2026 8:20 PM
news.ycombinator.com
Claude Code Opus 4.7 keeps checking on malwarehttps://news.ycombinator.com/item?id=47814832So during development, at every task I start, I see a line like this:`Own bug file — not malware.`It seems that it's obsessively checking if it's working on malware production.In another situation where I was working on a parser of a HTML document with JS, it refused because it believed that I was bypassing security measurements.I believe AI has to be supportive in the work that I'm doing. When it's obsessively checking me if I am doing anything wrong or abusing the system, I have the feeling it is controlling me. I understand that we do have guardrails and I also understand that it's very important that people do not abuse this new tech for bad stuff.I pay $200 per month for a max subscription. They already know who I am. Claude knows I work in scraper tech, and it also knows that our clients are the companies we scrape.Now with Opus 4.7, I've had a situation that it refused to continue because I asked to automate the cookie creation with a Chrome extension.In a situation where someonApr 18, 2026 10:46 AM
news.ycombinator.com
Why your company will never scale (or maybe why it will)https://news.ycombinator.com/item?id=47814662We’re in a copied world. Today, it is so incredibly easy for someone to see what you’re doing and copy your product. So the question is: How do you actually scale your business to the next level? How do you move past being just a "product" and become a trend, or a brand that you actually dream of? I believe it comes down to two things: User Laziness and Competitor Laziness1. Making the user too lazy to switch:When you look at Apple, it’s the perfect example. People switch to Apple because of the minimalism, the luxury, or even the peer pressure. But they stay because of the inter-connected interaction. Once you buy one device, you buy the second, then the third. Eventually, the devices are so interconnected that switching onto another provider like Android, feels inefficient. You’ve made the user too lazy to switch because the cost of leaving your ecosystem is too high-Adobe doesn't just sell Photoshop; they sell a workflow. Once a creative professional has their assets in the CreativeApr 18, 2026 10:12 AM
science.nasa.gov
CSDA Quality Assessment Report Evaluates Satellogic NewSat Datahttps://science.nasa.gov/uncategorized/csda-quality-assessment-report-evaluates-satellogic-newsat-data/The report adds to the growing documentation on commercial data’s contributions to Earth science research and applications.Apr 17, 2026 9:21 PM
rtrvr.ai
Show HN: AI Subroutines – Run automation scripts inside your browser tabhttps://www.rtrvr.ai/blog/ai-subroutines-zero-token-deterministic-automationWe built AI Subroutines in rtrvr.ai. Record a browser task once, save it as a callable tool, replay it at: zero token cost, zero LLM inference delay, and zero mistakes.The subroutine itself is a deterministic script composed of discovered network calls hitting the site's backend as well as page interactions like click/type/find.The key architectural decision: the script executes inside the webpage itself, not through a proxy, not in a headless worker, not out of process. The script dispatches requests from the tab's execution context, so auth, CSRF, TLS session, and signed headers get added to all requests and propagate for free. No certificate installation, no TLS fingerprint modification, no separate auth stack to maintain.During recording, the extension intercepts network requests (MAIN-world fetch/XHR patch + webRequest fallback). We score and trim ~300 requests down to ~5 based on method, timing relative to DOM events, and origin. Volatile GraphQL operation IDs are detected and foApr 17, 2026 9:03 PM
app.subconscious.dev
Show HN: Co-op: Your 24/7 Digital Internhttps://app.subconscious.dev/AI is in a weird place right now. Technical people marvel over it while non-technical people don't really care.So we built Co-Op, an app specifically designed for non-technical people to run AI agents without needing a Mac Mini or laptop running 24/7. Your agents run throughout the day and complete real work across your most important apps, no code required.For me, this looks like a daily notification with my unread emails across Outlook, Gmail, and any other inbox, the weather, commute time, flight prices I'm monitoring, and the news. But it goes way beyond that. Our agents can build slideshows on Google Slides, track your finances, follow sports scores, summarize and write documents, manage your calendar, and a lot more. All running in the background without you having to constantly prompt.Apr 17, 2026 8:05 PM
news.ycombinator.com
I'm creating a 2D queer sci-fi arcade musou roguelite gamehttps://news.ycombinator.com/item?id=47808135Musou Action Meets RogueliteFace hundreds of simultaneous enemies. In Starfish ROOM, everything is dopamine-fueled with sound and visual effects (attack lights, diamonds, dying monsters, blood exploding on the screen, and much more), but your power lies in your twinblade and dynamite bombs, which you use to kill the horde. You also choose two cards to gain luck or bad luck during battle, and for every 100 diamonds you spend, you choose a card.https://kittycreampuff.itch.io/starfish-room-finalApr 17, 2026 5:07 PM
science.nasa.gov
Quality Assessment Report Evaluates Tomorrow.io Precipitation Radar Datahttps://science.nasa.gov/science-research/earth-science/quality-assessment-report-evaluates-tomorrow-io-precipitation-radar-data/The report adds to the growing documentation on commercial data’s contributions to Earth science research and applications.Apr 17, 2026 3:06 PM
news.ycombinator.com
Ask HN: Agents Craving Contexthttps://news.ycombinator.com/item?id=47806038Hey, I was an early adopter of the Cursor IDE and pretty much installed it day 1 of it's public release. Like many I've been using LLMs to help accelerate the writing of code in my own company and side projects and have been quite optimistic and satisfied with the quality and experience of using the Cursor IDE chat -> composer -> agents to enhance the developer experience.However, recently it seems like there has been a shift in how agents work (I am mainly referring to using Cursor agents here but the seems to also apply for Claude Code). When I introduce a problem to the agent a while ago it used to just start writing code. I remember having to be explicit about selecting the files or even lines I wanted it to edit or generate code in, and be quite precise in supplying the LLM with the relevant context. These days I will write a similar prompt to what I would do before: "Refactor X.ts into separate files /utils/[module].ts using the /shared/utils directory as an example". (just a toyApr 17, 2026 2:00 PM
github.com
Show HN: Discourse-reader – a typed, read-only Python client for Discoursehttps://github.com/elninotech/discourse-readerHi HN,I've had to pull data from Discourse forums a few times now, and always had to keep dealing with raw requests.get(), rate-limiting and navigating the returned JSON. Our ecosystem is in Python so I looked if there was already a solution, I found pydiscourse (https://github.com/pydiscourse/pydiscourse), but it requires setting up an API key (a hassle) and only returns raw dicts.There were good solutions in other languages (like discourse2 in TypeScript) but yeah that wasn't in Python.This is useful if you don't want to set up an API key, only care about retrieving data (not interacting with the platform) and want something in Python. Also has some basic rate-limiting built in!Example usage: from discourse_reader import DiscourseClient client = DiscourseClient("https://meta.discourse.org") topic = client.topics.get(12345) print(topic.posts) print(topic.accepted_answer.cooked) for topic in client.topics.latest(limit=100): print(f"{topic.views:>6} views {topic.title}") The Pydantic moApr 17, 2026 9:12 AM
bing.com
A topical acne drug might be the next big thing in treating hair losshttp://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6a8cb9028b7b40d19ef5a2704bac0be8&url=https%3A%2F%2Fnypost.com%2F2026%2F04%2F17%2Fhealth%2Fa-topical-acne-drug-might-be-the-key-to-treating-hair-loss%2F&c=8109520813824286599&mkt=en-usA common acne medication may do more than clear skin. In a late-stage clinical trial, a higher concentration of it helped men with androgenetic alopecia (AGA) regrow and retain hair, with effects ...Apr 17, 2026 8:18 AM
spacenews.com
India’s TakeMe2Space sets sights on 50-kilowatt data centerhttps://spacenews.com/indias-takeme2space-sets-sights-on-50-kilowatt-data-center/COLORADO SPRINGS – After announcing a $5 million seed round in January, Indian startup TakeMe2Space seeks to raise $55 million to establish a 50-kilowatt orbital data center. “What is key for us is to demonstrate that we can play the orbital data center game globally,” TakeMe2Space founder Ronak Kumar Samantray told SpaceNews. “There’s a lot […] The post India’s TakeMe2Space sets sights on 50-kilowatt data center appeared first on SpaceNews.Apr 16, 2026 11:59 PM
spacenews.com
Countering missile threats ‘left of launch’https://spacenews.com/countering-missile-threats-left-of-launch/COLORADO SPRINGS – U.S. government agencies are working with industry to develop tools to disrupt missiles before they take flight, a timespan called ‘left of launch.’ “We’re looking at different aspects of the threat as it evolves,” Erich Hernandez-Baquero, Raytheon Intelligence and Space vice president of space intelligence, surveillance, reconnaissance, said at the Space Symposium. […] The post Countering missile threats ‘left of launch’ appeared first on SpaceNews.Apr 16, 2026 11:05 PM
news.ycombinator.com
Show HN: Runtime security for AI agents(injection,tool abuse, data exfiltration)https://news.ycombinator.com/item?id=47799856Hi HNI’ve been working on an open-source project to explore a problem I keep running into with LLM systems in production:We give models the ability to call tools, access data, and make decisions… but we don’t have a real runtime security layer around them.So I built a system that acts as a control plane for AI behavior, not just infrastructure.GitHub: https://github.com/dshapi/AI-SPMWhat it doesThe system sits around an LLM pipeline and enforces decisions in real time:Detects and blocks prompt injection (including obfuscation attempts) Forces structured tool calls (no direct execution from the model) Validates tool usage against policies Prevents data leakage (PII / sensitive outputs) Streams all activity for detection + audit Architecture (high-level) Gateway layer for request control Context inspection (prompt analysis + normalization) Policy engine (using Open Policy Agent) Runtime enforcement (tool validation + sandboxing) Streaming pipeline (Apache Kafka + Apache Flink) Output filApr 16, 2026 9:39 PM
spacenews.com
How space weather forecasting keeps astronauts (and satellites) safehttps://spacenews.com/how-space-weather-forecasting-keeps-astronauts-and-satellites-safe/BOULDER, Colorado – The sun’s volatile outbursts, such as storms, flares and other space weather, can cause serious harm to astronauts like the Artemis 2 crew who recently came home, and to satellites. That’s why the Space Weather Prediction Center (SWPC) in Boulder, Colorado — part of the National Oceanic and Atmospheric Administration — is […] The post How space weather forecasting keeps astronauts (and satellites) safe appeared first on SpaceNews.Apr 16, 2026 4:30 PM
nasa.gov
At the Edge of Lighthttps://www.nasa.gov/image-article/at-the-edge-of-light/In this photo taken on April 6, 2026, a portion of the Moon’s far side is seen along the terminator—the boundary between lunar day and night—where low-angle sunlight casts long shadows across the surface. A section of Orientale Basin is visible along the upper right portion of the lunar disk, its structure subtly revealed under […]Apr 16, 2026 2:38 PM
