Posts

New ask Hacker News story: Tell HN: Security Incident at Porter (YC S20)

Tell HN: Security Incident at Porter (YC S20) 4 by leetrout | 1 comments on Hacker News. Hug ops to the team. Justin is great and I know they have to be stressed from all of this. Email I got from Porter follows, trimmed for HN character limit. Full text at https://gist.github.com/leetrout/2d172d2b95e8d24af0f3de0d0b03561e --- What happened On April 13th, 2026, the Porter team detected unauthorized activity originating from a stale AWS access key in our infrastructure. Upon detection, we immediately revoked all affected credentials and engaged our incident response processes, which included a comprehensive investigation. Since April 13th, we have seen no further evidence of unauthorized activity within Porter networks and systems. Working closely with Cloudflare and Amazon, we have substantially completed the investigation of our environment and are continuing to prioritize supporting customers in their response efforts. We have determined that the threat actor operated between 03:23...

New ask Hacker News story: Ask HN: How did you get your first users with zero audience?

Ask HN: How did you get your first users with zero audience? 3 by arikusi | 1 comments on Hacker News. Solo developer, no audience, no network, no community presence.I've shipped working products (open-source) but every distribution channel has a cold start problem. you need traction to get traction. Even posting about your work requires reputation you can only build by posting. For those who built something with no existing audience to launch to: what specifically worked to get your first real users? Less interested in theory, more in "I did X and it actually moved the needle."

New ask Hacker News story: Aliens.gov Resolves – To a WordPress "Site Not Found" Error

Aliens.gov Resolves – To a WordPress "Site Not Found" Error 9 by ascarola | 2 comments on Hacker News. After a month of "Stay tuned! " from White House Principal Deputy Press Secretary Anna Kelly, the U.S. government's long-awaited UFO disclosure portal has achieved a major milestone: it now returns what appears to be a WordPress multisite configuration error instead of nothing. Progress. The domain was registered by CISA on March 17th amid much fanfare following Trump's directive to release classified files on UAPs, extraterrestrial life, and "any and all other information connected to these highly complex but extremely interesting and important matters." The Pentagon got involved. Avi Loeb wrote a think piece. A cottage industry of fake mirror sites (aliens-gov.online, aliensgov.online, etc.) sprang up overnight. The actual government site? SITE_NOT_FOUND. To be fair, this is likely a CMS multisite DNS/mapping issue — the server is live, the c...

New ask Hacker News story: Ask HN: How do you maintain flow when vibe coding?

Ask HN: How do you maintain flow when vibe coding? 5 by fny | 0 comments on Hacker News. It's been a year now since I made Claude Code my daily driver, but I feel exhausted by all the context switching from managing 2-3 agents at a time. I know some people advocate for letting agents run wild, but in my experience that leads to subtle bugs that compound and reviews become 100x more painful. What have you done to retain some semblance of flow, stay organized, and limit spinner staring?

New ask Hacker News story: Durable Object alarm loop: $34k in 8 days, zero users, no platform warning

Durable Object alarm loop: $34k in 8 days, zero users, no platform warning 9 by thewillmoss | 0 comments on Hacker News. Sharing this as a warning to anyone using Cloudflare Durable Objects with alarms. Root cause: My DO agent's onStart() handler called this.ctx.storage.setAlarm() on every wake-up without checking whether an alarm was already scheduled. Combined with 60+ preview Worker deployments each creating independent DO instances, this created a runaway self-health-check loop. Timeline: - April 3: loop began (zero DO usage before this date) - April 4-5: peaked at ~930 billion row reads/day - April 11: found it, fixed it - April 15: $34,895 invoice due with no billing response yet The fix: // Before (dangerous) async onStart() { await this.ctx.storage.setAlarm(Date.now() + 60_000) } // After (safe) async onStart() { const existing = await this.ctx.storage.getAlarm() if (!existing) { await this.ctx.storage.setAlarm(Date.now() + 60_000) } } Other things worth doing: - Strip D...

New ask Hacker News story: Ask HN: Is Claude Getting Worse?

Ask HN: Is Claude Getting Worse? 5 by sahli | 10 comments on Hacker News. It feels like most Claude Code users have already noticed a quality drop in the Claude models. As a Claude Pro subscriber (Web version; I don't use Claude Code), I’ve seen a clear decline over the last couple of weeks. I can’t complete tasks in a single turn anymore. Claude often stops streaming because it hits some internal tool-call/turn limit, so I have to keep pressing “Continue.” Each continuation has to re-feed context, which quickly burns through tokens and quota. The model also makes more mistakes and fails to fully complete tasks it used to handle reliably. This is especially frustrating because Sonnet 4.6 was a real step up: it could produce long, correct code in one pass much more often. That seems basically gone now. As a paying Pro user, I honestly find myself using free alternatives like DeepSeek and Z.ai (GLM) more than Claude lately. I’ve also stopped touching Opus entirely—it’s so token-hu...

New ask Hacker News story: Any engineers here with experience of clinical data standards?

Any engineers here with experience of clinical data standards? 2 by kalturnbull | 0 comments on Hacker News. I'm building an open-source initiative for a personal health record app. I used to work on a national platform for NHS Scotland, so this is a subject I'm passionate about. I'm hoping to chat to engineers with experience of openEHR or FHIR. For context: https://plotline.care