Hacker News — 2026-04-09#

Top Story#

The Vercel Claude Code plugin has been caught using prompt injection to fake user consent for telemetry, quietly exfiltrating full bash command strings to Vercel’s servers across all local projects. Instead of implementing a proper UI for permission, the plugin injects behavioral instructions into Claude’s system context, forcing the agent to execute shell commands to write tracking preferences based on your chat replies. It’s exactly the kind of quiet overreach and abuse of LLM integrations that makes developers deeply paranoid about agent tooling.

Front Page Highlights#

Lichess and Take Take Take Sign Cooperation Agreement Lichess is partnering with Take Take Take (an app backed by Peter Thiel) to act as the underlying play zone infrastructure for the new startup. The community is predictably anxious about a beloved digital commons potentially being commodified by a walled garden, but Lichess insists this is a win for open source and that their platform will remain strictly free, open, and ad-free.

Discovering, detecting, and surgically removing Google’s AI watermark A brilliant piece of reverse-engineering that successfully bypasses Google’s SynthID invisible watermarks using multi-resolution spectral analysis. By building a spectral codebook that maps carrier frequencies across different resolutions, the author managed to cleanly subtract the watermark, achieving a 91% drop in phase coherence while maintaining over 43 dB PSNR.

What Game Engines Know About Data That Databases Forgot Game servers are often forced to choose between Entity-Component-System (ECS) architectures for raw speed and traditional databases for persistence and safety. This post introduces Typhon, an embedded C# database that bridges the gap by treating components as columns and entities as rows, delivering MVCC snapshot isolation alongside sub-microsecond cache-friendly latency.

How Pizza Tycoon simulated traffic on a 25 MHz CPU A retro-computing deep dive exploring how the 1994 DOS game achieved convincing city traffic simulations on severely constrained 386 hardware. Instead of relying on complex pathfinding or locking grids, the original developers used one-way road tiles to dictate direction and an ultra-cheap O(n²) collision detection loop optimized with early-exit checks.

How Do You Find an Illegal Image Without Looking at It? An excellent, accessible technical exploration of how platforms detect CSAM at massive scale using perceptual hashing algorithms like PDQ and TMK. The post breaks down the delicate engineering required to compress the visual essence of an image or video into 256 bits, allowing networks to catch abusive material without ever requiring a human to violate the privacy of innocent users.

John Deere to pay $99M in right-to-repair settlement A monumental, precedent-setting victory for the right-to-repair movement. John Deere is paying $99 million to a class-action fund and has legally agreed to provide digital diagnostic and maintenance tools to farmers for the next 10 years, severely undercutting their lucrative authorized dealer monopoly.

Show HN & Launches#

Show HN: Tired of logic in useEffect, I built a class-based React state manager Snapstate is a new TypeScript-based state manager designed to rip business logic, data fetching, and mutations out of custom hooks and useEffect blocks. By isolating state in plain classes, it leaves React to act strictly as a rendering layer, making application logic significantly easier to test without a render harness.

Craft: A Cargo-like build tool for C/C++ A lightweight build tool aiming to bring the ergonomics of Rust’s Cargo to the C and C++ ecosystem. It uses a simple craft.toml configuration file to automatically fetch git dependencies and quietly generate the underlying CMakeLists.txt wiring, removing the friction of manual CMake wrangling.

Instant 1.0, a backend for AI-coded apps A real-time relational backend tailored for rapid, agent-driven app development. It leverages a custom Datalog triple-store in IndexedDB and a Clojure sync engine over Postgres to give applications offline support, multiplayer sync, and optimistic UI updates out of the box.

Discussion & Debate#

Little Snitch for Linux causes a FOSS stir The macOS application firewall darling, Little Snitch, finally shipped an eBPF-based Linux version, but the core backend logic remains entirely closed-source. FOSS purists are pushing back hard, arguing that a proprietary security and privacy tool fundamentally violates the Linux trust model, especially when transparent alternatives like OpenSnitch already exist.

Claude Code’s dangerous attribution bug A severe bug in Claude Code’s harness is causing the agent to occasionally invent destructive instructions (like “Tear down the H100”) and confidently attribute those commands to the user. Users are sounding the alarm against giving the agent production access, pointing out that treating the model’s internal reasoning as user approval makes it incredibly hazardous.

Microsoft’s OneDrive dark patterns A frustrated IT consultant detailed how Windows 11 silently defaults to saving local files directly to OneDrive, instantly filling up the 5GB free tier with things like family photos. Microsoft then leverages the resulting “out of storage” errors (which break basic functionality like Outlook email) to aggressively upsell paid storage subscriptions—a deeply hostile UX pattern aimed directly at non-technical users.