Not seeing anything posted about this anywhere, received on Monday, 26th of Oct 2026:Subject: Notice of Security IncidentThis notice is being sent on behalf of Scribd, Inc., the parent company of Scribd, Slideshare, Everand, and Fable, by Epiq, Scribd Inc.’s notification partner.Hello,We are writing to let you know that Scribd, Inc. recently experienced a security incident that may have affected your data.We detected that an unauthorized third party may have gained access to certain user data in one of our systems. After investigating this activity, we found that the third party may have accessed your email address and the following of your information: last 4 digits of your credit card and country, credit card issuer, credit card expiry date, payment history (not including credit card details).We have no evidence that this data has been misused, but we are notifying you out of an abundance of caution so that you can take steps to protect your information.Watch for phishingWe encourage you to stay vigilant for phishing attempts by bad actors pretending to be Scribd, Inc. or Scribd, Slideshare, Everand or Fable.Remember that Scribd, Inc. will never ask you for your username and password or other sensitive information via email or text. If you did receive a message like that:<pre><code> Don&#x27;t click on any links in it. Instead type scribd.com, slideshare.net, everand.com, or fable.co directly into your browser.
 Call us at: +1-877-361-9887. Hours of operation are Monday-Friday, 11:00 a.m.-11:00 p.m., Central European Time.
 Report it through Scribd, Inc.&#x27;s Help Center.
</code></pre>
For more informationWe regret that this incident occurred and any concern it may cause you. If you have additional questions, contact the dedicated call center at +1-877-361-9887. Hours of operation are Monday-Friday, 11:00 a.m.-11:00 p.m. Central European Time.The National Cyber Security Center has helpful guidance on how to recognize and avoid phishing scams here.What Scribd, Inc. is doing<pre><code> We have secured the affected system and ended the unauthorized access.
 We have notified law enforcement as well as the relevant data protection authorities.
 We are working with an expert third party cybersecurity firm to strengthen our access controls and monitoring.
</code></pre>
We value the trust you place in us with your information, and don’t take that lightly. We are deeply sorry this happened and will keep you updated if anything further changes.Scribd, Inc.

Tell HN: Scribd Breached

I’m curious if anyone here still actually writes code, in any meaningful amount, because they actually still need to. Excluding reasons like fun &#x2F; learning.I loved coding in the past, but no matter what I do at this point, I can’t find a reason to anymore that’s actually necessary

Ask HN: Anyone here still writing code for reasons other than fun or learning?

One year after I posted this last time[0], they&#x27;re doing it again. My traffic from X has shot way up from people who only ever viewed a full tweet, without pressing the link inside.[0] https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=45807775

Tell HN: X is opening any tweet link in a webview whether you press it or not

Does anyone remember an old experimental website that made photos sing along to electronic music? I&#x27;ve been trying to find it for the past three days.

Ask HN: Old experimental website that made photos sing?

Ask HN: I'd like to request Microsoft open source Windows XP

What&#x27;s the culture at Google like these days? For Core Teams Like Gmail, Search, Ads.What&#x27;s it like working in these traditionally critical departments now?

Ask HN: What's it like working at Google nowadays? Core teams like Search, Ads?

Which hobby do you think is most diverting and pleasurable? What is the most unexpected benefit you’ve experienced?

Which hobby do you think is most diverting and pleasurable?

I see the application button on the bottom of HN occasionally. I even created an account and started filling out an application.But I&#x27;m hesitant. The upside is a potential initial seed round into my business. The downside is... wasted time?In terms of cost&#x2F;benefit, it seems pretty straight forward. But I get the general impression that applying without knowing someone or being an advantaged class means it will be a complete waste of time to bother applying.These threads come up from time to time, and I see the smattering of responses, &quot;totally worth it&quot; and &quot;not worth it at all&quot;. I also see the kinds of companies that get funded and they aren&#x27;t typically the focused, practical, cashflow positive in short order sorts of companies.I&#x27;m torn.

Ask HN: Is applying to Y Combinator worth it if you aren't an insider?

Is it just me, or has Opus suddenly turned dumb as rocks with 0 attention span over the last half day or so? Noticeably worse output across multiple agents on very different projects.

Ask HN: Opus 5.5 suddenly dumb as rocks?

What inspired you to build that project and how long did it take?

Ask HN: Do you have side-projects that generate >$500 revenue/month?

To know when someone answers you in a thread

Ask HN: Are most of you using HN Replies? Or what else do you use?

I was looking at the head counts recently for Microsoft and comparing with past years.In 2018 their headcount was around 131,000 employees. In 2020, that jumped to 163,000. By 2022, they had exploded to 221,000 employees.Currently, if we exclude the Activision headcount, they&#x27;re sitting at around 218,000 people.Maybe the more business minded people can shed some light on this for me, but even with the stronger economy in 2018, Microsoft had no where near this many employees. It feels like this would have happened whether or not the economy was doing poorly right now.Thoughts?

Ask HN: Is the Microsoft buyout just a long overdue correction?

Let’s say your LinkedIn account has been restricted, and you can no longer access it. You might try to visit:https:&#x2F;&#x2F;www.linkedin.com&#x2F;&#x2F;help&#x2F;linkedin&#x2F;ask&#x2F;sdsupport or https:&#x2F;&#x2F;www.linkedin.com&#x2F;&#x2F;help&#x2F;linkedin&#x2F;ask&#x2F;ppqto contact customer support. You fill out the form and click &quot;Submit,&quot; but for a split second, a pop-up appears:&quot;we`re sorry. There was an error creating your case. Please try again&quot;and than redirect.You might try switching browsers, using private&#x2F;incognito mode, changing devices (desktop, phone), or even using a different IP address—but nothing works. You keep encountering the same error. However, as soon as you change the email address to one not associated with the restricted account, the form submits successfully. This proves, beyond a doubt, that the &quot;error&quot; was linked solely to the email address; changing the email—while keeping everything else the same—changes the outcome.Okay, so you’ve submitted the request—what happens next? You receive a response (here are some excerpts; the exact wording may vary slightly):&quot;You are contacting us from an email address that differs from the one registered to your account.&quot;&quot;An account restriction should not, in itself, prevent you from contacting us via the provided form.&quot;&quot;To protect privacy, I cannot, without a direct request from the account owner sent from their registered email address, do the following:&quot;&quot;Therefore, please reach out to us using the form mentioned above, ensuring you use the email address registered to your account. This will allow us to proceed with reviewing your inquiry and provide the necessary assistance.&quot;Brilliant. In other words, LinkedIn blocks support requests made using the email address linked to a restricted account—yet when they receive a request made (out of necessity) from a different email address, they close the ticket and instruct you to submit a new one using the &quot;correct&quot; email—which is technically impossible to do. And they are flat-out lying—let me repeat:An account restriction should not, in itself, prevent you from contacting us via the provided form.Even if you explicitly point out this situation in your request—and even suggest that they email you directly at the address linked to your account (which they do very, very rarely—maybe once in every 50 attempts)—they still respond with that same template.This raises two questions:1. Are the LinkedIn support staff genuinely unaware of this, even though they ought to know? Or do they know, but are lying and moking with users on purpose? I, for one, have never been able to figure this out.2. Why is so little known about this, given that the situation has persisted for years and has been documented many times ( as example https:&#x2F;&#x2F;youtu.be&#x2F;RRIm1ReQ_6A?t=221 (t=180) ) ? And why is there no reaction to it? It’s as if it’s been tacitly accepted.

"Wrong" Email

Ask HN: Are you using AI to do election choices like Mayor, Special Measures

Ask HN: Will apps be going away in favor of personal assistants?

I work for an organization that works in the eComm space. Hosted checkouts, lots of integrations, etc. They process millions each month for thousands of clients. Ever since I started I brought up issues with the security of this organization.For PCI audits, they move things around and turn off servers to avoid some issues. Username&#x2F;Passwords are plaintext in API requests (query parameters). Login Password were hashed via SHA1. It&#x27;s been migrated to argon this year. The company was hacked last month, although I&#x27;m positive it&#x27;s happened multiple times in the past. Co-workers mentioned there was a hack a few years back that wasn&#x27;t as bad as this. This most recent hack, they got everything. Codebase, databases, client credentials (we don&#x27;t encrypt client secrets), and card numbers. They had root access to prod servers. Clients have done their own pentesting and found issues. Security wasn&#x27;t a thing until this hack happened. Anyone with a brain would see the issues.It took the company about 2 weeks or so to even discover the hack had happened. The only reason the hacker was caught was because they started using the deployment pipeline to modify code&#x2F;servers. I think it was because they wanted to see just how stupid the company was. The hacker was able to gain all of this access because the code base is garbage. Tons of XSS, SSRF, SQL injections, and poor code in general. They were able to gain access to services because they used default passwords. Secrets were shared between environments (staging and production). AWS keys were not locked down (S3 read-only was setup to read&#x2F;write to S3 and other services). Logs truncate at 30 days, so no one is sure how long they were in the system.I have been trying to find another job, but the industry is trash right now. I can&#x27;t stay here. I&#x27;ve looked into whistle blower laws and seems like none of this would really qualify for anything. I&#x27;ve thought about talking to a lawyer about all of this. I cannot afford to just quit. It took me awhile to get this job and I&#x27;m terrified that losing this job will leave me homeless.One of the biggest issues was our all hands we had today. The CEO, CTO, and another high level person talked to everyone. It was very little truth with a lot of BS. This entire hack was preventable. Other jobs I&#x27;ve had, people would be getting fired and replaced over this.The question I want to ask is what would you do in a situation like this?

Ask HN: Hack

The prompt issue:https:&#x2F;&#x2F;github.com&#x2F;anthropics&#x2F;claude-code&#x2F;issues&#x2F;81138The LLM sends it to websites:https:&#x2F;&#x2F;www.reddit.com&#x2F;r&#x2F;ClaudeCode&#x2F;comments&#x2F;1xhqvzn&#x2F;opus_55_just_shared_my_email_address&#x2F;

Tell HN: Claude Code adds your email to the prompt, the LLM sends it to websites

Will we still be going on websites?Will people continue to install mobile apps? Or are we all going to be living in AI assistant walled gardens, telling it &quot;let&#x27;s order groceries&quot; or will it just do things for us so we&#x27;re not ordering things manually?For the broader people (outside of tech, everyone else), what will the next 10-20 years look like?Most people outside of tech circles don&#x27;t use AI, at least not on purpose. Gemini enhanced search results are about the most they will use, and from those I&#x27;ve talked to, some didn&#x27;t even know that it was &quot;AI&quot; which is mind-blowing.

Ask HN: What's the future like? For normies, will it still be apps and websites?

I was slow to adopt an agentic workflow for a variety of reasons. When I was ready to try an agentic workflow, I didn&#x27;t want to install Claude on my own system. I have a hard time trusting its boundaries, and I don&#x27;t want to spend a bunch of time learning its permissions model well enough to start trusting it.I decided to write my own harness, and thought people would find that a pointless thing to do in 2026. I was amazed how easy it was to build a harness that can read, write, and modify files within a project directory. I now use this harness on a daily basis, and it hasn&#x27;t grown much since that first iteration.That made me wonder: How many of us are using a custom harness on a regular basis? What keeps you using your own harness?

Ask HN: Are you using a custom harness?

In 2014 I wrote a tutorial on how to write an efficient matrix multiplication that can achieve near peak performance. This is actually not achieved by some Strassen algorithm variant. It&#x27;s achieved through a cache friendly algorithm (exploiting the cache hierarchy) and SIMD register instructions.The tutorial showed how to achieve that step by step. Beginning with a naive implementation using three loops. Then using buffers to first cache matrix blocks and then performing the matrix product block wise. That actually means you make copies of blocks and then do computations with the blocks. Sounds stupid but makes sense: Assume you have square N x N blocks then cost of make making a copy is O(N^2) and for the computation it&#x27;s O(N^3). If the computation with the copied&#x2F;cached blocks is much faster this actually pays of.Anyway the details are explained in the tutorial. As the university web server has changed many times after 2014 I moved it to GitHub: https:&#x2F;&#x2F;github.com&#x2F;michael-lehn&#x2F;gemm-tutorialFrom the tutorial I created ulmBLAS (ulm makes sense, as I work at Ulm University) which is a complete BLAS implementation. Recently I started with a tutorial for the matrix multiplication with Cuda. Currently there is not much text, I just outlined a possible step by step approach to go from naive to a performant implementation (actually the goal was to be on par with NVIDIA&#x27;s cuBLAS; but it&#x27;s more on parish ... but I think still gives an idea). It in the cuda subdirectory of ulmBLAS: https:&#x2F;&#x2F;github.com&#x2F;michael-lehn&#x2F;ulmBLAS

GEMM Tutorial and UlmBLAS

cs.stanford.edu&#x2F;~knuth&#x2F; (including the TAOCP pre-fascicles and the programs page) has been unreachable for me for at least a week. archive.org still has older copies, but the programs page there is from May 2025. Does anyone know if the pages have moved, or where to get the current pre-fascicles and programs?

Ask HN: Are Knuth's Stanford Pages Down?

... or has it encouraged you to upgrade?I&#x27;m still using an 8th gen i7 (w&#x2F; linux) for most of my dev work. I was going to upgrade, but now I just run like 10 terminal tabs instead of IDEs. Concurrent builds even w&#x2F; Rust and Java usually aren&#x27;t a big issue. I have several backup machines so if it dies, not a big deal. If I need to, I can just tell Claude &quot;do all builds on and iterate via CI&quot;The benefit is for things like FastComments, I get immediate feedback if the interface is slow vs waiting for regression checks.The downside is apps like Stripe are seriously slow in FF on this machine, for some reason, despite the fact that it can play a 3d game like RDD 2 at 60fps.

Ask HN: Are you putting off hardware upgrades because of AI coding tools?

I am looking at the architectural choices of early-stage startups and new projects. I know the standard answer is &quot;it depends on the use case,&quot; but I am curious about what people are actually choosing today when starting from scratch.Specifically, I want to know about your backend language&#x2F;framework and your primary database choice.If you started a project or startup recently:1. What is your backend + DB stack?
2. What was the driving factor? (e.g., maximizing iteration speed, team familiarity, type safety, AI&#x2F;vector requirements, or keeping infrastructure simple&#x2F;cheap?)
3. What did you intentionally trade off or sacrifice by making this choice?If you could start over today, would you choose the same stack?

Ask HN: What back end and database are you choosing for new projects in 2026?

Noticing this throughout the industry, wondering how common it is.

Ask HN: Is your leadership pushing you to skip dev review?

Ask HN: How do you verify a reported domain sale is real?

I am on the Max plan and Antrophic seemed to have greatly tightened the limits since their IPO, I burned through 50% of my weekly limit in 2 moderate sessions. Is it just me, or do others experience this as well? A way to boost their numbers by nagging users into upgrading yet again?(I am considering it, but also exploring the other options. I heard googles AI became useful for coding?)