News for hackers. Stuff that matters.

x______________

>I just want HN in dark mode....

Dark Reader extension for Firefox, works on mobile and desktop. I constantly forget this setup and blinds myself when I access HN from elsewhere.

>Next is Hacker X :)

Please don't :(

/s Please do! Who knows what will stick when you throw it at the wall?

>..and HackerGames

You mean this[0]?

0 https://hnarcade.com

Re:Tell HN: Scribd Breached on Saturday October 31, 2026 @12:06PM (#50317408)
> This particular set of beached data could stop existing if, instead of reusing a set of fixed data for payments, your bank allowed you to generate a unique code that sent a one-time (or recurring, locked to a single vendor) payment to the recipient.

Also known as virtual cards, discussed here [0]. At the moment, the onus is up to the cardholder and availability of the service from banks. It should be requested if your bank doesn't provide it.

0 https://news.ycombinator.com/item?id=50313747

Re:Tell HN: Scribd Breached on Saturday October 31, 2026 @04:26AM (#50314178)
>That doesn't answer why they are doing it in phases.

Correct!

“they are completely devoid of any useful data on their own incident and redirecting everyone to phone calls where data cannot easily be shared“

Call them up!

Re:Tell HN: Scribd Breached on Saturday October 31, 2026 @04:23AM (#50314165)
>My bank is the opposite of yours. They used to offer a similar service but shuttered it a few years ago.

Maybe a good time to call up the bank (or other banks) and ask them if they provide this or any other service that would prevent you from needing to cancel physical cards in case of these ever-increasing security incidents?

Late edit: just checked it out and the virtual cards can be ordered via the banking app, either permanent virtual or one-time use where the card auto-expires after the purchase has gone through. That's really neat! (Not gloating but sharing what I've learned, hope you can find similar security in your bank offerings).

Re:Jules Verne's Lost Novel on Saturday October 31, 2026 @04:06AM (#50314104)
Most of these photos seem heavily edited with only a few showing untouched skies. Thanks for sharing!
Re:Scribd Security Incident on Saturday October 31, 2026 @03:58AM (#50314070)
Re:Tell HN: Scribd Breached on Saturday October 31, 2026 @03:56AM (#50314061)
>How do we even know which credit card is affected by this if we want to cancel it?

"If you have additional questions, contact the dedicated call center at +1-877-361-9887. Hours of operation are Monday-Friday, 11:00 a.m.-11:00 p.m. Central European Time."

Re:Tell HN: Scribd Breached on Saturday October 31, 2026 @03:00AM (#50313857)
Seems Scribd made the news 13 years ago for the same issue[0] [1] and an archive.org link of the original-now-deleted announcement[2]!

0 https://news.ycombinator.com/item?id=5493280 Scribd hacked – emails and hashed passwords leaked (scribd.com) 106 points by joosters on April 4, 2013 | hide | past | favorite | 65 comments

1 https://thenextweb.com/news/scribd-reveals-it-was-hacked-thi...

2 https://web.archive.org/web/20130407114005/https://support.s...

Notable callouts from 2013: "Our investigation indicates that no content, payment and sales-related data, or other information were accessed or compromised. We believe the information accessed was limited to general user information, which includes usernames, emails, and encrypted passwords."

"We take our responsibility to protect our users' data extremely seriously and constantly improve our security infrastructure and policies. Following this incident, we have implemented numerous additional safeguards. Not only have we taken steps to address the specific issues that led to this incident, but we are also conducting a comprehensive security review and are implementing more general measures to proactively enhance security. We are also alerting relevant authorities to the matter and will co-operate with their investigation."

Re:Tell HN: Scribd Breached on Saturday October 31, 2026 @02:32AM (#50313747)
OP> Great reason to use <...> virtual cards wherever possible and online

> but there are hardly any adequate alternatives for the rest of the world, as far as I know.

Maybe start with your bank?

My local (Central European) bank offered virtual cards service yesterday to which I declined setting them up on site, will strongly reconsider now, thanks!

Re:Tell HN: Scribd Breached on Saturday October 31, 2026 @02:28AM (#50313726)
> I just ignore it in my searches and just find the pdf elsewhere.

In retrospect, this was the correct way to proceed.

The docs I found were content, but nothing that could be used for its original purpose. Splurging a monthly subscription to find out sucked, but being breached and getting my info stolen is a kick in the ass.

Re:Tell HN: Scribd Breached on Saturday October 31, 2026 @02:25AM (#50313713)
> I don't see any email like this in my inbox.

They stated that they're doing a staggered rollout for email notifications which states at the beginning of October with other users reporting receiving the email yesterday[0].

0 https://news.ycombinator.com/item?id=50313006

Re:Tell HN: Scribd Breached on Saturday October 31, 2026 @02:19AM (#50313682)
The email received is a rehash of the linked article, nice find.

>Why not tell all customers at once, especially if payment information was involved?

Answered in the article!

“Q: Am I affected? How will I be notified?

A: We are sending notices to affected individuals in phases, so not everyone has received theirs yet“

And also..

"Q: Where can I find the latest updates?

A: The latest updates regarding the incident will be made available on this page.“

..."Updated October 01, 2026 19:29"

For a site where you find data, they are completely devoid of any useful data on their own incident and redirecting everyone to phone calls where data cannot easily be shared.

Re:Proton Apologizes on Friday October 30, 2026 @11:26PM (#50312936)
..for AI, but not for leadership behaviors.
Re:Somoene bets $10M on Reddit stock anad loses half of it on Friday October 30, 2026 @11:15PM (#50312890)
You can't post old.reddit links anymore as you are used to:

"Log in to use old Reddit

To keep Reddit safe, accounts are required to access old Reddit. Log in, or continue without an account on reddit.com.“

Re:Googling Firebase got me a phishing page hosted by Google on Friday October 30, 2026 @10:59PM (#50312816)
> I typed “Firebase” into the Chrome address bar and clicked the first result

> the first result was an ad

No real sympathy for the user here: the internet is not secure and everything today can be different tomorrow for a plethora of reasons. Not being vigilant will lead to these types of incidents.

Broken link, redirects to a YouTube channel.

Tell HN: Scribd Breached

Not seeing anything posted about this anywhere, received on Monday, 26th of Oct 2026:Subject: Notice of Security IncidentThis notice is being sent on behalf of Scribd, Inc., the parent company of Scribd, Slideshare, Everand, and Fable, by Epiq, Scribd Inc.’s notification partner.Hello,We are writing to let you know that Scribd, Inc. recently experienced a security incident that may have...

( Read More... | 123 comments | 70 points | on HN )
> Even some ants apparently.

I need to write this up properly someday but an ant from my colony that had almost drowned in honey showed some similar characteristics of consciousness...

After giving them a drop of honey, I left for 15 minutes and came back to an ant being stuck and motionless in the drop. I fished it out, rinsed it off in some water and then put it on a tissue to dry. I blew on it for 10 minutes and then saw some motion in the legs... a short moment after, it began wriggling about and then sat on its abdomen like a cushion and sat there for 5 minutes, looking like it was contemplating life and the ordeal it went through.

Once that 5 minutes was up, it returned to being an ant and started looking for its home, I brought it back and it went back into its nest.

I made up for the mistake by bringing the ant back to life and it showed me behaviour I never saw or heard of before (with no supporting mentions anywhere on the net).

(For the record, honey delivery is now more controlled to avoid these sticky situations, I'm not mad enough of a scientist to actually try this again for more results.)

Recently, they've started putting fly wings of the fruit flies that they get fed, on top of their water feeder to get my attention... it's really interesting to see them get creative.

The ant colony is 4.5 years old and numbers in about a dozen of workers at about 2mm in length, they only had 6 workers and a plump golden queen when I found them nested in one of my houseplants!

> To be clear, so far some of the oldest ice found is over 6 million years old...

And they're working on finding even older!

"Given the spectacularly old ice we have discovered at Allan Hills, we also have designed a comprehensive longer-term new study of this region to try to extend the records even further in time, which we hope to conduct between 2026 and 2031"

> when it became clear I was data bound, Claude offered recommendations for BitTorrent clients for me to "acquire data".

Torrents, http or ftp are methods to transfer (or acquire) content/data, and are not illegal or criminal to use or suggest.

Re:Quad9 (DNS Resolver) to Exit France on Friday October 23, 2026 @11:04AM (#50210272)
Thank you for bringing your cause to light, with the very well thought and written write-ups on the blog post and further here on HackerNews.

Despite going against you stand for, why not consider implementing a service fee of 100,000 euros per domain name that is requested to be blocked?

I wish I was /s on this but this be a way for you to say that you comply, with no sane company would go about requesting tens or hundreds of domains to be blocked, endlessly, for the rest of eternity (as the courts currently are asking your company to do, forever, at your own cost).

Technically, there is GeoIP filtering going into place after the 24th so why not put that to good use for a while until you get some orders for this new service (or a drop in interest from the suitors) ?:)

Re:Dutch government had hacked into Jared Kushner's phone on Friday October 23, 2026 @10:45AM (#50209942)
> The US can grab all that data from US companies

It goes a lot deeper than that..

Re:Milwaukee Brewers renege on golden tickets sold in 2016 on Thursday October 22, 2026 @06:16AM (#50193449)
The story has been updated: ticket holders, in a wordcraft statement, will be able to attend the world series match and keep their timeless ticket for another match in the future.
Re:Bleached corals thrive within days on Monday October 19, 2026 @08:17AM (#50151485)
> ..the proof things can change was during the lock downs and saw how quickly things changed once all of the automobile pollution approached zero

This is not mentioned enough. The world, nature and all of its glory will thrive once human activity comes to a standstill as seen though the lockdown.

Re:How employment is changing at Anthropic on Sunday October 18, 2026 @08:43AM (#50140610)
> The agents only have to be better than we are and we’re not very good. Same argument as self-driving.

> Don’t fear change.

Change is inevitable.

What I understood from the comment is that Op fears the boiling frog scenario. [0]

0 https://en.wikipedia.org/wiki/Boiling_frog

Re:When No ID Means No Internet on Sunday October 18, 2026 @12:50AM (#50138004)
> There's no benefit to tracking users' identities.

There's a good thread that's aligned to this going on right now about an open source voting system [0].

While there's benefit in the political sphere in tracking user identities and the underlying results, wouldn't the question here be: Is there any benefit in validating users' identities?

0 Source code of the Estonian online voting system (github.com/valimised) https://news.ycombinator.com/item?id=50127586

Re:Microsoft Teams is a red flag on Sunday October 18, 2026 @12:41AM (#50137978)
> Are you confusing posts with chat messages?

Op was talking about both: private chats at first and then Team group posts on the titles part..

I can also validate those grievances.

> I saw a video recently about someone doing home automation work, put some transmitter in his basement, and all his neighbours' car key fobs stopped working because his transmitter was overwhelming them. It's hard to think of some LLM solution for that.

Faraday cages?

That's akin to a music recording studio not soundproofing their walls.

Older »