Hacker News
1Google broke its promise to me – now ICE has my data
- Amandla Thomas-Johnson, a Ph.D. student on a U.S. visa, attended a pro-Palestinian protest briefly in 2024. ICE later subpoenaed his Google data without his knowledge, breaking Google's promise to notify users first. The Electronic Frontier Foundation filed complaints against Google for deceptive practices.
Legal validity of administrative subpoenas
Discussion centers on whether ICE's administrative subpoena contained a proper gag order and if Google violated their notification policy. ACLU guidance suggests such subpoenas lack legal weight without court orders, but companies face legal costs defending against them.Migration away from Google services
Users share experiences moving to alternatives like Proton Mail and self-hosting solutions after losing trust in Google's data handling. Migration challenges include changing email addresses across services and finding replacements for integrated Google features.Government surveillance overreach
Commenters express concern about ICE targeting legally present individuals for attending protests, with discussion of broader surveillance capabilities through cell phone tracking, geofencing data, and the erosion of privacy rights post-9/11.
2Stop Flock
- Flock Safety operates AI-powered cameras that track vehicles beyond license plates, analyzing features like color, damage, and associations between cars. These surveillance systems create detailed movement records accessible to law enforcement without warrants, raising Fourth Amendment concerns about mass tracking of innocent citizens.
Police understaffing and effectiveness
Discussion centers on whether police departments are truly understaffed or misallocating resources. Critics argue cops focus on revenue-generating activities like traffic tickets rather than investigating actual crimes, while supporters say reduced beat policing creates demand for surveillance solutions.Flock surveillance concerns
Users debate Flock's privacy violations, including employees watching children's activities and the broader surveillance state implications. Discussion covers whether to ban the business model entirely versus targeting specific companies, with concerns about mass data collection and abuse.Data regulation and liability
Participants explore legal frameworks to control surveillance data, including mandatory breach notifications, toxic waste-style liability for data holders, and constitutional protections. Focus on making surveillance economically unfeasible through strict regulations.
3Tell HN: Fiverr left customer files public and searchable
- Fiverr uses Cloudinary to process PDFs and images in worker-client messaging but uses public URLs instead of secure signed ones. This has resulted in hundreds of sensitive documents including tax forms and PII being indexed by Google search results. Despite being notified 40 days ago, Fiverr's security team hasn't responded to fix this privacy issue.
Security breach severity
Fiverr exposed thousands of tax returns, SSNs, and sensitive documents through Google searches for over 40 days. Users found complete 1040 forms, API tokens, health records, and confidential business data publicly accessible. The breach affected vulnerable populations seeking affordable services.Professional accountability
Discussion on whether software engineers handling sensitive data should require certification and face business-ending penalties for security failures. Commenters shared examples of incompetent developers who didn't understand basic security concepts or proper data handling.Company response controversy
Fiverr denied this was a security incident, claiming users intentionally shared the documents publicly. They disputed receiving the original security report 40 days ago, though the reporter provided evidence of their disclosure attempt.
4Claude Code Routines
- Claude Code routines are automated workflows that combine prompts, repositories, and connectors to run on cloud infrastructure. They can be triggered by schedules, API calls, or GitHub events like pull requests and pushes. Routines enable automated tasks such as code review, alert triage, documentation updates, and deployment verification, running autonomously without human approval and appearing under your account credentials across connected services.
Vendor lock-in concerns
Users express distrust of Anthropic's platform strategy, preferring "dumb pipe" commodity services over feature-rich platforms. Many worry about getting locked into proprietary tools and losing ability to switch providers easily.Terms of service confusion
Users frustrated by unclear ToS around using Claude CLI in automated workflows and third-party integrations. Ambiguity about what's allowed leads to fear of account suspension despite legitimate use cases.Claude performance degradation
Multiple users report Claude Code performing worse recently, with basic syntax errors and beginner mistakes in Python. Performance issues coincide with 1M token context window changes and usage limit reductions.
5Want to write a compiler? Just read these two papers (2008)
- Most programming books, like compiler texts, are overly complex and broadly scoped, making it hard to know where to start. This has created the myth that compilers are difficult to write. Jack Crenshaw's "Let's Build a Compiler!" series breaks this myth by demonstrating that compiler writing can be simple enough for beginners, though it lacks abstract syntax trees. Modern high-level languages make tree manipulation trivial, and the nanopass framework suggests treating compilers as series of simple transformations rather than complex monolithic systems.
Dragon book criticism
Many users found the "Dragon Book" (Compilers: Principles, Techniques, and Tools) too intimidating and theoretical for beginners. Multiple commenters said it discouraged them from compiler writing, preferring more practical approaches like Wirth's book or modern alternatives.Recommended beginner resources
Discussion centered on better starting materials including Ghuloum's incremental approach paper, Crafting Interpreters, Niklaus Wirth's compact compiler book, and Nora Sandler's "Writing a C Compiler" as more accessible alternatives to traditional textbooks.Parsing approaches and tools
Debate over parsing methods, with many favoring hand-written recursive descent parsers over traditional parser generators (LR/LL). Parser combinators like Megaparsec were praised for simplicity, while formal grammar tools were seen as overrated for practical use.
6Spain to expand internet blocks to tennis, golf, movies broadcasting times
- Telefónica obtuvo autorización judicial para bloquear dinámicamente sitios web que difunden contenidos deportivos y de entretenimiento sin permiso. Los bloqueos, que ya afectan internet durante partidos de LaLiga, se extenderán a Champions League, tenis, golf y otros deportes, impactando tanto operadoras grandes como pequeñas y medianas a nivel nacional.
Eu-level regulations against blocking
Discussion about whether EU should regulate against individual countries like Spain implementing broad IP blocks. Some argue EU should protect against this via net neutrality directives, while others believe EU is more likely to implement similar restrictions itself rather than oppose them.Service vs pricing problem in sports piracy
Debate over whether sports piracy stems from poor service or high prices. Users cite examples like expensive bundled packages (€200+/month) vs cheap pirate IPTV (€20-60/year), fragmented streaming rights across multiple services, and inconvenient payment/cancellation processes.Collateral damage from IP blocking
Concerns about legitimate services being disrupted when ISPs block Cloudflare IPs. Examples include CI jobs failing, inability to locate missing relatives via tracking apps, and general internet reliability issues affecting businesses and critical services during sports events.
7God sleeps in the minerals
- This appears to be a comment section for a blog post titled "God Sleeps in the Minerals" with 20 responses from April 2026. Many commenters ask "What is this?" with increasing question marks, while others discuss the poetic meaning of the title. One commenter finds it offensive, another explains it's a spiritual expression about divine presence in nature, and someone references a Paramahansa Yogananda quote about God's consciousness across different forms of life.
Mineral collecting and rockhounding accessibility
Discussion of local mineral clubs, field trips to private mining sites, and challenges of finding quality specimens. Western US has better public BLM lands for collecting, while Northeast areas face limited access due to development and site closures from irresponsible collecting practices.Perfect geometric crystal formations
Fascination with naturally occurring perfect geometric shapes, especially pyrite cubes and other regular polyhedra. Comments explore the striking contrast between organic randomness and mathematical precision in nature, with suggestions for growing crystals at home.Museum recommendations and collections
Sharing of notable mineral museums including Rice Museum (Portland), Carnegie Museum (Pittsburgh), Harvard Museum, and international locations in Prague and Germany. Discussion of displays ranging from massive specimens to microscopic thin sections.
8Lean proved this program correct; then I found a bug
- A researcher fuzzed a formally verified zlib implementation and found zero vulnerabilities in the verified code itself, but discovered a heap buffer overflow in the underlying Lean runtime and a denial-of-service bug in unverified archive parsing code, demonstrating that formal verification works where applied but can't protect against bugs in the trusted computing base or unverified components.
Misleading title and scope of verification
Discussion centers on whether the article's title is clickbait since bugs were found outside the proven code boundary - in the Lean runtime and unverified parser, not the formally verified algorithm itself. Critics argue this misrepresents what formal verification actually covers.Specification completeness problem
Users debate the fundamental challenge that formal verification can only prove code matches its specification, but cannot verify the spec itself is complete or correct. Missing specifications and spec bugs remain a major limitation of formal methods.Trusted computing base and system-wide bugs
Debate over whether bugs in unverified components (runtime, compiler) should count as bugs in "verified" systems. Some argue the entire binary matters for real-world security, while others distinguish between proof correctness and implementation bugs.
9Backpacks got worse on purpose
- VF Corporation bought major backpack brands like JanSport, North Face, and Eastpak, controlling 55% of the US market. They systematically reduced quality by using cheaper materials, weaker zippers, and less stitching while maintaining the same trusted brand names and warranties, creating a business model based on repeat failures and purchases.
Product quality vs. price economics
Discussion centers on whether quality products still exist at higher price points, with debate over inflation-adjusted costs, purchasing power, and the difficulty of identifying truly quality goods versus overpriced brands in modern markets.AI-generated content concerns
Users identify the article as likely AI-written based on repetitive sentence structures and rhetorical patterns, expressing frustration about LLM-generated content polluting online discourse and making it harder to distinguish authentic human writing.Backpack brand recommendations
Community members share positive experiences with specific quality backpack brands like Osprey, Peak Design, and Crumpler, discussing lifetime warranties, durability, and customer service as alternatives to the declining legacy brands.
10Good sleep, good learning, good life (2012)
- This comprehensive article explores sleep science and its practical applications for learning and creativity. It covers the neurophysiology of sleep, introduces the "free running sleep" concept where you sleep without alarm clocks following natural rhythms, and examines sleep disorders like DSPS and insomnia. The text discusses napping benefits, polyphasic sleep schedules, and factors affecting sleep quality including stress, caffeine, and exercise. It emphasizes that good sleep requires balancing circadian and homeostatic components for optimal cognitive performance.
Mental state and life goals affecting sleep habits
Users discuss how having clear life objectives and mental stability impacts sleep quality and health habits. When people lack purpose or are unhappy, they may neglect sleep and health, while having goals motivates better self-care.Sleep challenges with young children
Parents share experiences of sleep deprivation with babies who wake frequently at night, discussing the evolutionary mismatch between needing rest and caring for infants. Solutions include family support networks and co-sleeping approaches.Age-related sleep sensitivity and alcohol effects
Older users report increased sensitivity to poor sleep and alcohol's impact on rest quality. Even small amounts of alcohol significantly disrupt sleep and cognitive function, with recovery taking much longer than in youth.