HN Flash

Hacker News. Daily summary. Top 20 stories.

2026-10-12

Passkeys are a trap (nonfunctional.substack.com)

Passkeys offer convenience but strip user control through mandatory hardware-backed attestation.

Two camps: those who say password managers fix passkeys, and those who agree attested passkeys are a future lock-in risk.

798 pts · 432 comments

Sudden drop in Cloudflare bot traffic after strike on Yandex datacenter (radar.cloudflare.com)

Cloudflare bot traffic from Yandex's ASN dropped after strikes on its datacenters.

The drop is from physical strikes on Yandex facilities, not Cloudflare action; commenters debate bot definitions and HA lessons.

633 pts · 251 comments

3rd Yandex Cloud Data Center Was Hit (status.yandex.cloud)

A Ukrainian UAV strike destroyed Yandex's third data center in Vladimir, disrupting most cloud services.

Three of Yandex's five data centers have now been hit, prompting debate on war accountability and future data center hardening.

601 pts · 739 comments

Total Annihilation, rebuilt for modern computers (Nanolathe)

Nanolathe is an open-source, MIT-licensed engine that reimplements Total Annihilation with modern GPU rendering.

Enthusiasm for Total Annihilation reimplementations with hopes for Supreme Commander, plus mixed takes on Beyond All Reason's community.

584 pts · 221 comments

The gap in shared understanding of LLM capability is widening (X (formerly Twitter))

Karpathy argues the understanding gap of LLM capability is widening into a sharp funnel.

Skepticism dominates: labs' tools are buggy, and human verification is the real wall.

547 pts · 789 comments

NYC's "Click to Cancel" rule is now in effect (nyc.gov)

NYC's "Click to Cancel" rule now requires businesses to make subscription cancellation as easy as sign-up.

Support is strong, but debate centers on whether the rule's ambiguity will lead to costly litigation or encourage malicious compliance.

529 pts · 263 comments

Fingerprints are the new cookies (royfish.dev)

Browser fingerprinting is replacing third-party cookies as a more persistent tracking method.

Two camps: fingerprinting is illegal under EU law, or enforcement is failing and the tech works.

514 pts · 252 comments

Nitter: Update Oct 10th seeking funding and legal help (nitter.net)

Nitter seeks funding and legal help after X Corp. demanded takedown.

Legal gray area dominates: Nitter's open-source nature versus X's cease and desist demands.

460 pts · 241 comments

Terence Tao: Math 2.0 [pdf] (teorth.github.io)

Tao argues AI is shifting math from proof scarcity to abundance.

Dissent on Tao's cancer analogy: efficacy matters more than mechanism.

445 pts · 451 comments

Deloitte falsified documents to evade tax on Abramovich's wealth (bbc.com)

BBC Panorama finds Deloitte helped falsify documents to hide Roman Abramovich's wealth and evade tax.

Cynicism dominates: commenters see Big Four firms as enablers of corruption, not ethical auditors.

439 pts · 138 comments

LineageOS 24.0 (lineageos.org)

LineageOS 24.0 launches based on Android 17 with WebUSB flash tools and app updates.

Mixed appreciation for device longevity versus frustration with kernel limits and comparison to GrapheneOS.

437 pts · 180 comments

Google told to halt work on datacentres in Finland over environmental concerns (The Guardian)

Finland ordered Google to halt two data center projects for failing to complete required environmental impact assessments.

Widespread skepticism of Google's apology; fines seen as trivial; predictions of weak enforcement by Finland.

431 pts · 144 comments

I'm sorry, but you still have to think (It's all about the bit)

AI agents cannot yet replace human judgment in code rewrites, as shown by a Rust port's flaws.

Commenters split: most agree thinking remains necessary, some defend AI with expert oversight.

403 pts · 174 comments

I paid people to try and follow my README (shkspr.mobi)

Paying real users to find flaws in a README reveals hidden assumptions and improves documentation.

Approach endorsed as UX testing; main critique targets emoji-heavy READMEs.

402 pts · 196 comments

Documents add to evidence in climate deception case against ExxonMobil (insideclimatenews.org)

Newly disclosed documents show Exxon scientists privately doubted the company's climate solutions.

Frustration that deception by oil companies yields no accountability; split between structural and voter-blame explanations.

399 pts · 214 comments

IRCv3 (ircv3.net)

IRCv3 defines backwards-compatible protocol extensions to modernize IRC chat.

Two camps: those nostalgic for IRC, those citing its lack of offline messaging.

393 pts · 334 comments

So, you’d like to sell your print issues of The Onion? (The Onion)

The Onion is asking for help locating missing print issues from its archive, particularly early volumes.

Mixed reactions on whether the request is genuine or satirical, with some commenters offering to check their stored issues.

360 pts · 56 comments

Cartographers of North Korea (2019) (Cartographers of North Korea)

OpenStreetMap contributors explain why they map North Korea.

Two camps: those valuing the free data and those questioning the veracity of tourist glimpses.

291 pts · 58 comments

The tilde in your PATH may not be your HOME (Disconnect3d's blog)

An unquoted tilde in PATH expands to a literal `~` directory, not $HOME.

Widely seen as a known footgun; camp split on whether to prepend or append to PATH.

241 pts · 160 comments

A Remote Employee Refused 160 Webcam Photos a Day. Her Employer Fired Her (inc.com)

An employee was fired after refusing AI webcam photos every three minutes.

Commenters condemned invasive surveillance, calling it treating employees as property.

239 pts · 173 comments