Hacker News Digest
Monday, April 20, 2026
In This Issue
- Hacker News
- Vercel April 2026 security incident
- Vercel Says Internal Systems Hit in Breach
- Notion leaks email addresses of all editors of any public page
- Airline worker arrested after sharing photos of bomb damage in WhatsApp group
- The insider trading suspicions looming over Trump's presidency
- Turtle WoW classic server announces shutdown after Blizzard wins injunction
- Banned by Anthropic?
- The Uncanny Valley and the Rising Power of Anti-AI Sentiment
- CEOs admit AI had no impact on employment or productivity
Zipper Data Brief
April 20, 2026
Your daily digest of the best from Hacker News
Top 6 Trending
#1
769 points
· colesantiago
· comments
# Summary
Vercel suffered a security breach originating from a compromised third-party AI tool's Google Workspace OAuth app, exposing a limited subset of customers' environment variables and secrets, sparking widespread criticism about the lack of transparency, inadequate initial guidance, and architectural risks of consolidating web infrastructure into a single platform.
#2
377 points
· whiteyford
· comments
A user noted this was a duplicate post, pointing to an existing discussion thread on HackerNews about the same Vercel breach incident.
#3
377 points
· Tiberium
· comments
# Summary
Notion publicly leaks editor email addresses on public pages—a documented but unfixed issue dating back years that the company acknowledges is harder to fix than it appears. The discussion reflects broader frustration with Notion's security practices, slow response to privacy concerns, and shift toward AI marketing over core functionality.
#4
276 points
· aa_is_op
· comments
# Summary
The discussion revolves around whether the UAE's arrest of an airline worker for sharing bomb damage photos is justified national security censorship or authoritarian suppression of legitimate information. Commenters are divided between those citing wartime security concerns and those criticizing the UAE's pervasive surveillance capabilities and broader pattern of suppressing free speech and civil liberties.
#5
256 points
· blondie9x
· comments
# Summary
The discussion criticizes media for using cautious language like "suspicions" around what commenters view as obvious insider trading by Trump administration officials, while expressing broader frustration that institutional checks have failed to prevent or punish such corruption. Multiple commenters argue the system is broken and accountability is unlikely given recent Supreme Court rulings and political dynamics.
#6
253 points
· Brajeshwar
· comments
# Summary
The discussion reflects widespread frustration that Blizzard successfully shut down Turtle WoW—a creatively ambitious private server that many felt offered better content and gameplay than Blizzard's own Classic WoW—while highlighting the legal inevitability of the action and broader complaints about Blizzard's mismanagement of the franchise.
AI / Machine Learning
97 points
· gck1
· comments
# Summary
The discussion is highly skeptical of the "Banned by Anthropic" website, with commenters questioning its authenticity due to suspicious account patterns, broken functionality, and doubts about whether the incidents are real or astroturfed. While some acknowledge legitimate concerns about AI moderation being overly aggressive, most view the site as likely fabricated or misleading.
Show HN: Google Gemini Is Scanning Your Photos – and the EU Said No
51 points
· anju-kushwaha
· comments
# Summary
Users discuss concerns about Google's photo scanning practices, with debates over opt-in/opt-out mechanisms, data usage for training, and recommendations to switch to privacy-focused alternatives like Ente or Immich.
41 points
· jcbritton
· comments
# Summary
Anti-AI sentiment stems from concrete harms rather than mere skepticism: job displacement fears, AI-generated spam wasting people's time, wealth concentration among owners, hardware price inflation, and forced adoption by profit-seeking companies—combined with legitimate concerns about misinformation, privacy, and the technology's design favoring capital over workers.
82 points
· tcp_handshaker
· comments
# Summary
CEOs acknowledge AI hasn't delivered promised productivity or employment gains, yet companies continue investing heavily in it—likely due to competitive pressure, sunk cost fallacy, and the need to figure out proper use cases rather than any proven ROI.
178 points
· shivampkumar
· comments
The community appreciates the technical work of porting TRELLIS.2 to Mac Silicon by replacing CUDA kernels with PyTorch alternatives, though some question the model's quality and suggest publishing the reusable components as a toolkit. Key concerns include memory requirements, missing examples, and whether the approach could be further optimized with Metal shaders.
Startups / Business
215 points
· Liriel
· comments
# Summary
VCs relying on GitHub stars as an investment signal is fundamentally flawed because stars are easily manipulated through bot services and don't correlate with actual code quality, maintenance, or real adoption—developers should instead evaluate repos by examining commit history, issue handling, contributor activity, and code quality directly.
226 points
· tambourine_man
· comments
# Summary
The discussion reveals widespread frustration with Adobe's subscription model and aggressive pricing, with users increasingly switching to free or affordable alternatives like Blender, Krita, Affinity, and Darktable—though professionals in print, design, and photography remain somewhat locked in due to industry standards and compatibility requirements.
153 points
· 1vuio0pswjnm7
· comments
# Summary
Ex-CEO and ex-CFO of failed AI company iLearningEngines were charged with fabricating 90% of their $421M revenue through forged contracts and circular money transfers. Commenters expressed skepticism about whether white-collar criminals will face real consequences, with several predicting pardons or minimal sentences.
8 points
· mkdirpepper
· comments
Users praised Noodlist's design and concept as a Letterboxd-style app for instant ramen, while the creator mentioned encountering database limitations and faced questions about user traction and revenue.
60 points
· tibbar
· comments
# Summary
Stripe's APIs have become overly complex for startups due to years of enterprise feature additions, though they remain excellent for established businesses and simple use cases like small shops. Opinions vary sharply—some praise its flexibility while others find it unnecessarily complicated and prefer simpler alternatives.
More Stories (34)
112 points
· Brajeshwar
· comments
131 points
· theahura
· comments
81 points
· mikhael
· comments
91 points
· devonnull
· comments
73 points
· eigenhombre
· comments
71 points
· naves
· comments
53 points
· pabs3
· comments
119 points
· feigewalnuss
· comments
73 points
· rbanffy
· comments
57 points
· twapi
· comments
221 points
· doener
· comments
31 points
· doener
· comments
24 points
· hereme888
· comments
147 points
· ragojose
· comments
207 points
· doener
· comments
23 points
· benwerd
· comments
20 points
· geox
· comments
23 points
· Brajeshwar
· comments
16 points
· Jimmc414
· comments
19 points
· kiyanwang
· comments
17 points
· logicprog
· comments
89 points
· Palmik
· comments
46 points
· bachmeier
· comments
14 points
· CalChris
· comments
31 points
· johnnyApplePRNG
· comments
21 points
· pauxel
· comments
119 points
· vcf
· comments
34 points
· surprisetalk
· comments
18 points
· MattIPv4
· comments
20 points
· zachdotai
· comments
119 points
· jruohonen
· comments
202 points
· crescit_eundo
· comments
94 points
· lelanthran
· comments
20 points
· amb135cm
· comments
Created by Zipper Data Co.
· 2026-04-20 12:02 UTC
· Unsubscribe
Get digests like this delivered to your inbox every morning.
Subscribe Free