frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Need feedback on sandflare.io – AI Agent Sandboxes with

1•ajaysheoran2323•29s ago•0 comments

When Dancing Plagues Struck Medieval Europe

https://daily.jstor.org/when-dancing-plagues-struck-medieval-europe/
1•rawgabbit•2m ago•0 comments

Is It Worth Learning Unity in 2026? In the Age of AI

https://darkounity.com/blog/is-it-worth-learning-unity-in-2026
1•hacker_13•4m ago•0 comments

I Built a Open Source Portfolio and Project Website – Sean Filimon

https://seanfilimon.com
2•seanfilimon•5m ago•0 comments

Microlink: Tailscale-compatible VPN client for ESP32

https://github.com/CamM2325/microlink
1•MrBuddyCasino•11m ago•0 comments

Bear Roll – Daily roll of Bear Blog's top posts

https://bearroll.dev/
2•freediver•12m ago•0 comments

How to build an Agent

https://ampcode.com/notes/how-to-build-an-agent
1•pramodbiligiri•17m ago•1 comments

Ex150nosauce+ACV-5 review: Bouncing off the new Bottom?

https://www.exfatloss.com/p/ex150nosauceacv-5-review-bouncing
1•paulpauper•22m ago•0 comments

Math Is Still Catching Up to the Mysterious Genius of Srinivasa Ramanujan

https://www.quantamagazine.org/srinivasa-ramanujan-was-a-genius-math-is-still-catching-up-20241021/
3•paulpauper•23m ago•0 comments

Qten AI platform for social media content creator

https://www.qten.ai/
1•bandishankar•23m ago•0 comments

Spektrafilm – Open-source Film Simulation

https://github.com/andreavolpato/spektrafilm
1•mikae1•27m ago•1 comments

Chinese Room

https://en.wikipedia.org/wiki/Chinese_room
1•slopinthebag•30m ago•0 comments

How to talk about open source without making a mess

https://dirkriehle.com/2026/04/13/for-the-press-how-to-talk-about-open-source-without-making-a-mess/
1•Tomte•31m ago•0 comments

Analysis of 320k careers suggests that productive researchers stay that way

https://www.nature.com/articles/d41586-026-00744-0
1•salkahfi•31m ago•1 comments

The Cadaver Synod: Putting a Dead Pope on Trial (2019)

https://daily.jstor.org/the-cadaver-synod-putting-a-dead-pope-on-trial/
1•rawgabbit•32m ago•0 comments

Como hackear O face pelo email só quero ter acesso a conta

1•lilika•33m ago•1 comments

Stardrop Supply Chain Attack Targets Venture Capital Firms, Luxury Brands

https://opensourcemalware.com/blog/stardrop-attack
2•jruohonen•36m ago•0 comments

Adding multilingual support to my puzzle game

https://qcgeneral29.itch.io/lets-learn/devlog/1489057/lets-learn-japanese
1•LandenLove•38m ago•0 comments

Pepsi was warned $7 for Doritos was too much. Now they are paying the price

https://www.independent.co.uk/us/money/pepsico-doritos-high-prices-b2952994.html
4•matthest•38m ago•1 comments

Fake Linux leader using Slack to con devs into giving up their secrets

https://www.theregister.com/2026/04/13/linux_foundation_social_engineering/
2•jruohonen•39m ago•0 comments

I built a Next.js programmatic SEO engine to drive iOS app installs

https://www.yilore.app/zh-CN
2•jalonwong•41m ago•0 comments

Extracted System Prompts from ChatGPT, Claude, Gemini, Grok, Perplexity and More

https://github.com/asgeirtj/system_prompts_leaks/
1•beatthatflight•41m ago•0 comments

Human scientists trounce the best AI agents on complex tasks

https://www.nature.com/articles/d41586-026-01199-z
2•frasermarlow•42m ago•0 comments

Millions in the US never finished college

https://www.yahoo.com/news/articles/millions-us-never-finished-college-040500291.html
1•lxm•44m ago•0 comments

Cephalopod Coordination Protocol, Useful for Teams Using AI Agents

https://github.com/Squid-Proxy-Lovers/ccp
3•qvipin•48m ago•1 comments

AT&T's iconic phone

https://www.theverge.com/podcast/910725/western-electric-500-att-version-history
1•colinprince•51m ago•0 comments

Google has a secret reference desk

https://cardcatalogforlife.substack.com/p/google-has-a-secret-reference-desk
7•maxutility•57m ago•2 comments

Over 4,732 Messages, He Fell in Love with an AI Chatbot. Now He's Dead

https://www.wsj.com/tech/ai/google-gemini-jonathan-gavalas-death-07351ab2
2•1vuio0pswjnm7•1h ago•1 comments

Mob Software: The Erotic Life of Code (2001)

https://www.dreamsongs.com/MobSoftware.html
3•pabs3•1h ago•1 comments

Mark Carney secures majority government in Canada after special election win

https://www.theguardian.com/world/2026/apr/14/canada-special-election-results-pm-mark-carney-majo...
4•petermcneeley•1h ago•0 comments
Open in hackernews

A new spam policy for "back button hijacking"

https://developers.google.com/search/blog/2026/04/back-button-hijacking
93•zdw•1h ago

Comments

CableNinja•1h ago
Frustrating it took this long for something to be done about this, but glad its now got something being done.
throwaway81523•39m ago
> When a user clicks the "back" button in the browser, they have a clear expectation: they want to return to the previous page. Back button hijacking breaks this fundamental expectation.

It seems pretty stupid. Instead of expanding the SEO policy bureaucracy to address a situation where a spammer hijacks the back button, the browser should have been designed in the first place to never allow that hijacking to happen. Second best approach is modify it now. While they're at it, they should also make it impossible to hijack the mode one.... oh yes, Google itself does that.

spankalee•8m ago
What about all the very legitimate uses of programmatically adding history entries?
al_borland•1h ago
Some Microsoft sites have been very guilty of this. They are the ones that stick in my head in recent memory.
sixothree•59m ago
Epic store makes it impossible to navigate backwards from the checkout on mobile at least. Not sure if it's design or just poor design.
542458•56m ago
Are they? This seems about deceptive or malicious content (i.e., redirecting to ads) rather than “something in my history triggers a JS redirect”. I’ve definitely experienced the latter with MS, but never the former.
surround•43m ago
It seems like Google's policy is unconcerned with the intent of the practice. If a website JS redirect ruins the user experience by breaking the back button, it will be demoted in search results. It doesn't matter whether or not the redirect was meant to be deceptive or malicious, websites shouldn't be ruining the user experience.
lamasery•55m ago
IIRC the Azure “portal” does this. Also likes to not record things as navigation events that really feel like they should be. Hitting back on that thing is like hitting the back button on Android, it’s the “I feel lucky” button. Anything could happen.
SuperNinKenDo•24m ago
Happened to me yesterday through a link off here. I was already expecting it given the domain, but usually mashing back fast enough does the trick eventually. Not this time. Had to kill the tab.
musicale•1h ago
The iron law of web encrapification: every web feature will (if possible) be employed to abuse the user, usually to push advertising.
chongli•57m ago
It really comes down to JavaScript. The web was fine when sites were static HTML, images, and forms with server-side rendering (allowing for forums and blogs).
AuthAuth•49m ago
It wasnt "fine".
atoav•13m ago
Oh, the social media was much, much better. People much more open, tracking didn't exist. All the idiots still thought computers were only a thing for nerds and kids.
pottertheotter•42m ago
Did you use the web back in 1995? It was fun, but it also sucked compared to what we have now. Nothing is ever perfect, but I wouldn’t want to go back.
ryandrake•27m ago
I’d go back in a heartbeat. Making the web a software SDK was the worst thing to happen to it.
collabs•25m ago
You talk about 1995 but I wouldn't even go back to 1999. Dialup was so painful. It advertised 56 know but in practice I never even say 48...
yjftsjthsd-h•15m ago
That seems like a separate thing. You can send 199x-era HTML over a gigabit connection.
endgame•43m ago
I cannot even reliably press [Space] any more to page down through sites that are meant to be all about content!
bschwindHN•59m ago
Cool, now maybe let's do something about all the shit I have to clear out out my face before I can read a simple web page. For example, on this very article I had to click "No thanks" for cookies and then "No thanks" for a survey or something. And then there was an ad at the top for some app that I also closed.

It's like walking into some room and having to swat away a bunch of cobwebs before doing whatever it is you want to do (read some text, basically).

internet101010•50m ago
Don't forget the useless "Got it!" popups, especially when the site blurs the screen to guide you to it.
pwg•47m ago
With uBlockOrigin set to default deny all the javascript on the page there are:

zero cookie banners

zero surveys popping up

zero ads to be closed

Just the text of the page with no other distractions in the way.

not_your_vase•31m ago
Haha, we had a solution for that, called pop-up blockers. Then when they became very usable, everyone switched to overlays injected with javascript, so they became unblockable.

But thinking of this at this moment, this could be a good use for a locally ran LLM, to get rid of all this crap dynamically. I wonder why Firefox didn't use this as a usecase when they bolted AI on top of Firefox. Maybe it is time for me to check what api FF has for this

Terr_•20m ago
I'm waiting for someone to develop an augmented-reality system that detects branded ads or products, compares them against a corporate-ownership database, applies policies chosen by the user, and then adds warning-stripes or censor-bars over things the user has selected against.

It would finally put some teeth behind the myth of the informed consumer, and there would be gloriously absurd court-battles from corporations. ("If they don't like what we're doing they can vote with their wallets... NOT LIKE THAT!")

93po•24m ago
ublock origin with annoyance filters on solves 95% of this
carlosjobim•10m ago
Your problems have been solved for more than a decade. Set your browser to open pages in reader view by default and you don't have these issues.

You are a decade behind in your life. Why didn't you look for a solution to your problems, does it feel better to complain?

synack•56m ago
Are they considering all uses of window.history.pushState to be hijacking? If so, why not remove that function from Chrome?
omcnoe•50m ago
No, only if your website abuses window.history.pushState to redirect the user to spam/ad content is it considered abuse.
tgsovlerkhgsel•50m ago
Because clicking on a navigation button in a web app is a good reason to window.history.pushState a state that will return the user to the place where they were when they clicked the button.

Clicking the dismiss button on the cookie banner is not a reason to push a state that will show the user a screen full of ads when they try to leave. (Mentioning the cookie banner because AFAIK Chrome requires a "user gesture" before pushState works normally, https://groups.google.com/a/chromium.org/g/blink-dev/c/T8d4_...)

kro•2m ago
[delayed]
tgsovlerkhgsel•56m ago
Now do paywalls next.
charcircuit•50m ago
Google should actually fix this from the browser side instead of trying to seriously punish potentially buggy sites.
SuperNinKenDo•21m ago
Honestly if your site is buggy in a way that effectively breaks the browser, maybe you should be punished.
josephcsible•18m ago
What does this have to do with sites being buggy? This change is about obvious intentional abuse.
domenicd•17m ago
We tried a few times. We got as far as gating the ability to push into the "real history stack" [1] behind a user activation (e.g. click). But, it's easy to get the user to click somewhere: just throw up a cookie banner or an "expand to see full article" or similar.

We weren't really able to figure out any technical solution beyond this. It would rely on some sort of classification of clicks as leading to "real" same-document navigations or not.

This can be done reasonably well as long as you're in a cooperative relationship with the website. For example, if you're trying to classify whether a click should emit single-page navigation performance entries for web performance measurement. (See [2].) In such a case, if the browser can get to (say) 99% accuracy by default with good heuristics and provide site owners with guidance on how to annotate or tweak their code for the remaining 1%, you're in good shape.

But if you're in an adversarial relationship with the website, i.e. it's some malicious spammer trying to hijack the back button, then the malicious site will just always go down the 1% path that slips through the browser's heuristics. And you can try playing whack-a-mole with certain code patterns, but it just never ends, and isn't a great use of engineering resources, and is likely to start degrading the experience of well-behaved sites by accident.

So, policy-based solutions make sense to me here.

[1]: "real history stack": by this I mean the user-visible one that is traversed by the browser's back button UI. This is distinct from the programmer-visible one in `navigation.entries()`, traversed by `navigation.back()` or `history.back()`. The browser's back button is explicitly allowed to skip over programmer-visible entries. https://html.spec.whatwg.org/multipage/speculative-loading.h...

[2]: https://developer.chrome.com/docs/web-platform/soft-navigati...

twism•34m ago
Reddit! I'm looking at you?
mlmonkey•23m ago
But the question is: why are sites allowed to hijack the Back Button?!?
filcuk•20m ago
Because it has a legitimate use. As anything, the tools will be abused by malicious actors
josephcsible•19m ago
So that in single-page applications, it can work intuitively instead of always taking you all the way out of the app.