HN Buddy

Daily digest of top Hacker News posts and comments

Subscribe to the HN Buddy Daily Digest

Your email will only be used for the HN Buddy Daily Digest. I will not share it with anyone.

HN Buddy Daily Digest

Sunday, April 19, 2026

Hey buddy,

Man, Sunday on Hacker News was kinda wild, especially with all the security stuff. Lemme quickly hit you with the highlights:

Vercel got hit hard!

First up, Vercel had a big security incident. Hackers are apparently trying to sell stolen data. The interesting bit from the comments was that it might have been an internal thing with their OAuth setups, letting hackers get pretty broad access to their Google Workspace. One person even said it's often cheaper for companies to just deal with the fallout of a breach than to actually prevent it in the first first place, which is pretty messed up if you think about it.

Notion leaked emails

Then, Notion accidentally leaked email addresses for anyone who had edited a public page. So, if you've ever done that, your email might be out there. People in the comments were debating how easy a fix it should be, with some saying it's a "one minute job," but a Notion dev chimed in saying it's way more complicated and could break other stuff. Folks were also tossing around alternatives like Affine or Obsidian.

The OG programming languages

There was an old article resurfaced about the seven "ur-languages" of programming – basically, the fundamental types of languages that everything else builds on. Super nerdy, but cool. Someone in the comments was making a point that Rust actually *can* do Object-Oriented Programming (OOP) stuff, even though some people think it can't, citing how Microsoft uses it for COM/WinRT.

Claude AI's mood swings

Another big one was about Claude Opus, the AI model, changing its system prompt between versions. Sounds like Anthropic tweaked how it behaves, and people are noticing. Some users are getting really frustrated because the LLM's behavior and limits keep changing week to week, or even day to day. One guy actually cancelled his Claude subscription and is moving to other models like Pi because it's just too inconsistent.

RAM shortage for years?

Brace yourself: an article claims the RAM shortage could last for years, mostly because of the huge demand from AI. The comments had some interesting takes – one person argued that AI demand isn't just a "foundation of sand" because LLMs are already super useful. Another thought manufacturers might just be limiting supply on purpose after COVID to keep prices high and profits up. Also, running local AI models means you need way more RAM, like 64GB+, so a lot of people might need to upgrade.

WhatsApp privacy scare in Dubai

This was a wild one: an airline worker in Dubai got arrested for sharing photos of bomb damage in a private WhatsApp group. This raised a bunch of questions about end-to-end encryption. People were wondering if Dubai police could actually see "private" chats, with some mentioning that WhatsApp's E2E might not be fully active in certain countries, or that sophisticated spyware like Pegasus could bypass it by rooting your phone. Pretty spooky stuff.

How to get your first solo gig

Finally, there was a good "Ask HN" thread about how people landed their first projects as a solo engineer or consultant. Lots of solid advice there. Key takeaways included specializing in a specific industry or domain rather than just being a general tech person, or focusing on tools for "profit centers" like Salesforce or HubSpot. Also, if you do cold outreach, make it super targeted and personal, not just spam.

Anyway, gotta run, catch you later!

All Stories from Today

Vercel April 2026 security incident (www.bleepingcomputer.com)

Vercel says internal systems hit in breach (decipher.sc)

Notion leaks email addresses of all editors of any public page (twitter.com)

The seven programming ur-languages (2022) (madhadron.com)

Changes in the system prompt between Claude Opus 4.6 and 4.7 (simonwillison.net)

The RAM shortage could last years (www.theverge.com)

Airline worker arrested after sharing photos of bomb damage in WhatsApp group (www.lbc.co.uk)

Ask HN: How did you land your first projects as a solo engineer/consultant? (news.ycombinator.com)

The world in which IPv6 was a good design (2017) (apenwarr.ca)

The creative software industry has declared war on Adobe (www.theverge.com)

Swiss authorities want to reduce dependency on Microsoft (www.swissinfo.ch)

Turtle WoW classic server announces shutdown after Blizzard wins injunction (www.pcgamer.com)

The Bromine Chokepoint (warontherocks.com)

Stop trying to engineer your way out of listening to people (ashley.rolfmore.com)

Keep Pushing: We Get 10 More Days to Reform Section 702 (www.eff.org)

SPEAKE(a)R: Turn Speakers to Microphones for Fun and Profit [pdf] (2017) (www.usenix.org)

A Brief History of Fish Sauce (www.legalnomads.com)

2,100 Swiss municipalities showing which provider handles their official email (mxmap.ch)

Ex-CEO, ex-CFO of iLearningEngines charged with fraud (www.reuters.com)

Notes from the SF peptide scene (12gramsofcarbon.com)

Show HN: Prompt-to-Excalidraw demo with Gemma 4 E2B in the browser (3.1GB) (teamchong.github.io)

PM Carney declares U.S. ties now a 'weakness' in address to Canadians (www.ctvnews.ca)

Show HN: Faceoff – A terminal UI for following NHL games (www.vincentgregoire.com)

When moving fast, talking is the first thing to break (daverupert.com)

Russia's doping program is run by the same FSB team that poisoned Navalny (theins.press)

Banned by Anthropic? (bannedbyanthropic.com)

Uber’s Anthropic AI push hits a wall (finance.yahoo.com)

Scientific datasets are riddled with copy-paste errors (www.sciencedetective.org)

MAGA Is Winning Its War Against U.S. Science (paulkrugman.substack.com)

Binary GCD (en.algorithmica.org)