News Nug
Subscription bombing and how to mitigate it

Published: 2026-04-02 | Origin: Hacker News

Recently, Suga observed a strange trend where new users were signing up but not engaging with the platform, leaving accounts inactive. The usernames were unusual, resembling random strings, prompting further investigation. This led to the discovery of subscription bombing, a tactic where bots sign up a victim's email on multiple sites, overwhelming their inbox with cluttered emails. The primary intent is not to access these accounts but to distract the victim while the attacker commits fraud, such as resetting bank passwords or making unauthorized purchases. Initially

Garbage Collection: From First Principles to Modern Collectors in Java, Go and Python

Published: 2026-04-02 | Origin: /r/programming

The author, Shubham Raizada, reflects on their journey through various programming languages—Java, Go, Rust, and back to Java—and highlights the recurring theme of garbage collection (GC). They express a need to understand GC better, particularly its effects on performance and latency. This led them to explore foundational papers on garbage collection, particularly McCarthy's 1960 paper on Lisp, which introduced the mark-and-sweep method, and Wilson's 1992 survey organizing subsequent techniques into a taxonomy

Email obfuscation: What works in 2026?

Published: 2026-04-02 | Origin: Hacker News

The content discusses various techniques for concealing email addresses from spammers, emphasizing the importance of using multiple methods in combination for enhanced protection. Key points include: 1. **Basic Techniques**: While HTML entities are often easily decoded by harvesters, they can still deter many basic ones. 2. **Placement**: Hiding email addresses in unconventional locations can be effective, although the address is still in plain text. 3. **Accessibility**: Techniques should cater to users with screen readers. 4.

Steam on Linux Use Skyrocketed Above 5% in March

Published: 2026-04-02 | Origin: Hacker News

Michael Larabel is the founder and principal author of Phoronix.com, established in 2004 to enhance the Linux hardware experience. He has authored over 20,000 articles on Linux hardware support, performance, graphics drivers, and more. Larabel is also the lead developer of various benchmarking software, including the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org. Phoronix Premium offers an ad-free experience and other benefits while supporting the site’s operations. Contributions can

I built a gem that gives AI coding agents a complete mental model of your Rails app - schema, routes, models, views, conventions. 39 tools, zero config."

Published: 2026-04-02 | Origin: /r/ruby

The content emphasizes the commitment to user feedback and highlights a Rails developer's expertise in creating a gem that enhances AI interactions within Rails applications. The developer has a decade of experience and has designed an efficient architecture that leverages AI tools to function with minimal configuration. The gem allows AI agents to interact seamlessly with Rails apps via the MCP protocol, simplifying the process of fetching information like definitions, source code, and caller relationships through a single command. This results in greater efficiency and accuracy, particularly during migration and model

The Claude Code Leak

Published: 2026-04-02 | Origin: Hacker News

The recent accidental leak of Claude Code’s source code has sparked extensive discussion in the tech community. The author shares five observations that focus more on the implications of the leak rather than the leak itself. They note that the quality of a product’s code does not necessarily determine its success, particularly in the software industry, as evidenced by the sudden success of Claude Code and Cursor despite concerns about coding practices among developers. This suggests that even if the code is poorly written, a product can still thrive if it meets

Quantum computing bombshells that are not April Fools

Published: 2026-04-02 | Origin: Hacker News

This week, two significant announcements in quantum computing (QC) emerged. The first, from Caltech, demonstrated a method for achieving quantum fault-tolerance with reduced overhead using high-rate codes, applicable to architectures like neutral atoms and potentially trapped ions. The second announcement, from Google, revealed a lower-overhead implementation of Shor's algorithm capable of breaking 256-bit elliptic curve cryptography. Notably, Google opted to disclose this result through a cryptographic zero-knowledge proof to prevent attackers from

A new C++ back end for ocamlc

Published: 2026-04-01 | Origin: Hacker News

The content discusses the introduction of a new C++ backend for `ocamlc`, which enhances the previous C implementation used by the runtime and FFI. It provides an example program that calculates prime numbers up to a user-defined limit and details how to compile the program into C++ code, resulting in a file named `primes.cpp`. The piece notes that C++ lacks mutable state support, making the OCaml standard library inaccessible due to its reliance on mutation. To work around this, a portion

DRAM pricing is killing the hobbyist SBC market

Published: 2026-04-01 | Origin: Hacker News

Raspberry Pi has announced significant price increases for all models equipped with LPDDR4 RAM, including a new 3GB RAM Pi 4 priced at $83.75, and a 16GB Pi 5 now costing $299.99. This trend reflects wider issues in the hobbyist single-board computer (SBC) market, which is struggling due to rising DRAM costs, making new boards increasingly expensive and less accessible for hobbyists. Many vendors, except for Radxa, have reduced

Adding WASM Plugins to Your App | Using Wasmi as a runtime and Zola as an example.

Published: 2026-04-01 | Origin: /r/programming

The author has recently made small improvements to their website, such as using a Rust crate compiled to WASM to properly justify Arabic poetry. They recognized the need for OpenGraph metadata when sharing articles on social media and temporarily chose a torn Syrian flag image, which isn't always relevant. The author proposed WASM plugins in Zola forums, although they await approval. The article reflects their thought process as they experiment, noting challenges in passing complex data between the Host and Plugin due to memory management issues. They emphasize

New mruby CBOR Implementation

Published: 2026-04-01 | Origin: /r/ruby

The content discusses a fast CBOR (Concise Binary Object Representation) encoding and decoding library for mruby, highlighting its benefits, performance metrics, and usage guidelines. CBOR is a compact and efficient data format, comparable to JSON and msgpack. The library reportedly offers encoding speeds approximately 30% faster than msgpack and up to 3 times faster selective decoding than simdjson. It incorporates security features like depth limits and deterministic behavior. Users can integrate it into their mruby project by modifying

API Client Migration: From Postman to Bruno – Dotkernel

Published: 2026-04-01 | Origin: /r/programming

Failed to fetch content - HTTP Error - SSL_read: unexpected eof while reading

Understanding CPUs by building one in Kotlin

Published: 2026-04-01 | Origin: /r/programming

This content is Part 1 of a two-part series on building a 16-bit CPU from scratch using Kotlin. It serves as an introductory guide to CPU architecture, covering concepts such as the Instruction Set Architecture (ISA), registers, memory, the Arithmetic Logic Unit (ALU), and the fetch-decode-execute cycle. The article aims to demystify CPU internals, explaining that while the topic can seem abstract and complex, understanding it is essential for developing a CPU. By the end of

Live: Artemis II Launch Day Updates

Published: 2026-04-01 | Origin: Hacker News

NASA is providing live updates for the Artemis II test flight, with broadcast coverage available on NASA+, Amazon Prime, and YouTube. Key developments include the successful deployment of the Orion spacecraft’s solar array wings, which are essential for power generation during the mission. Each solar wing has 15,000 solar cells and extends the Orion's wingspan to about 63 feet. Upcoming milestones include the perigee raise maneuver and apogee raise burn, which will adjust Orion's orbit for deep space operations

N+1 Driven Development

Published: 2026-04-01 | Origin: /r/ruby

This content presents a curated list of educational resources, including video episodes related to tech, infrastructure, hardware, and software, which are not instructional. It also features articles on software and tutorials. The call to action encourages support and interaction, inviting questions or discussions on various topics. Additionally, it mentions "N+1 Driven Development" and "Quality Ruby Screencasts" as specific references.

Timesliced reservoir sampling: a new(?) algorithm for profilers

Published: 2026-04-01 | Origin: /r/programming

The article by Itamar Turner-Trauring discusses methods for processing infinite streams of events, particularly when the length of the stream is unknown. Since storing all data isn't feasible, a random sampling approach can yield useful insights. It uses the example of a performance profiler, which analyzes the call stack of running code to identify slow areas. The article introduces reservoir sampling, a method for selecting random samples from such a stream. It explains how to pick a single sample and then extends the concept to selecting multiple samples

EmDash – A spiritual successor to WordPress that solves plugin security

Published: 2026-04-01 | Origin: Hacker News

The cost of software development has significantly decreased, with recent advancements enabling the rebuilding of major projects quickly using AI coding agents. Following this trend, a team has undertaken the ambitious task of completely rebuilding WordPress, the CMS that powers over 40% of the internet, which is now 24 years old. The new CMS, named EmDash, is designed to be a modern successor to WordPress, written entirely in TypeScript and optimized for serverless environments while still allowing deployment on personal hardware or various

Simple Top-Down Parsing in Python

Published: 2026-04-01 | Origin: /r/programming

In his July 2008 article, Fredrik Lundh discusses recursive-descent parsing in Python, highlighting its simplicity and efficiency when parsing prefix-heavy grammars. He notes, however, that such parsers can become inefficient with expression syntaxes that include multiple operators of varying precedence. A naive implementation may require excessive recursion for parsing simple expressions. Lundh references Vaughan Pratt's 1970s improvement, known as Top-down Operator Precedence, which enhances recursive-descent parsing by associating semantics with tokens

Throttling can silently drop the final state of an interaction

Published: 2026-04-01 | Origin: /r/programming

Throttling is a technique used by frontend developers to control the frequency of function calls in response to high-frequency events like resizing and scrolling. It limits how often a signal can trigger work, which is beneficial for performance but poses a risk of missing important events, especially the final state after an event ends. This can result in stale app states or missed analytics data. The content emphasizes that while throttling limits invocation frequency during events, it does not ensure a final invocation after these events cease, leading to

The journey of a request in a Raft-based KV store (from client to commit)

Published: 2026-04-01 | Origin: /r/programming

The article discusses the internal workings of a replicated Key-Value (KV) server built on the RAFT protocol, following the completion of labs 3 and 4 from the MIT 6.584 course. The main goal of this implementation is to create a fault-tolerant system composed of multiple KV server nodes that can continue to serve clients even if some nodes fail. RAFT ensures strong consistency and can tolerate the failure of `f` nodes in a system of `2 * f +