frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Valve releases Steam Controller CAD files under Creative Commons license

https://www.digitalfoundry.net/news/2026/05/valve-releases-steam-controller-cad-files-under-creat...
608•haunter•4h ago•193 comments

Appearing Productive in the Workplace

https://nooneshappy.com/article/appearing-productive-in-the-workplace/
284•diebillionaires•3h ago•94 comments

From Supabase to Clerk to Better Auth

https://blog.val.town/better-auth
95•stevekrouse•2h ago•38 comments

A Theory of Deep Learning

https://elonlit.com/scrivings/a-theory-of-deep-learning/
36•elonlit•1d ago•10 comments

The bottleneck was never the code

https://www.thetypicalset.com/blog/thoughts-on-coding-agents
403•Anon84•2d ago•273 comments

Learning the Integral of a Diffusion Model

https://sander.ai/2026/05/06/flow-maps.html
12•benanne•1h ago•0 comments

Show HN: I built an open-source email builder, alternative to Beefree/Unlayer

https://play.templatical.com
47•oahmadov•3h ago•15 comments

BYD overtakes Tesla and Kia as the best-selling EV brand in key overseas markets

https://electrek.co/2026/05/05/byd-overtakes-tesla-kia-best-selling-ev-brand-key-overseas-markets/
123•doener•1h ago•143 comments

CARA 2.0 – “I Built a Better Robot Dog”

https://www.aaedmusa.com/projects/cara2
407•hakonjdjohnsen•2d ago•49 comments

Setting up a Sun Ray server on OpenIndiana Hipster 2025.10

https://catstret.ch/202605/srss-hipster202510/
108•jandeboevrie•8h ago•32 comments

What makes a good smartphone camera?

https://cadence.moe/blog/2026-05-05-what-makes-a-good-smartphone-camera
46•zdw•1d ago•26 comments

Google tools for customizing searches

https://cardcatalogforlife.substack.com/p/google-has-a-secret-reference-desk
47•maxutility•15h ago•9 comments

Colombia hosts talks on exiting fossil fuels as global energy crisis deepens

https://www.latimes.com/environment/story/2026-04-26/colombia-hosts-talks-on-exiting-fossil-fuels...
80•PaulHoule•2h ago•46 comments

Knitting bullshit

https://katedaviesdesigns.com/2026/04/29/knitting-bullshit/
376•ColinEberhardt•14h ago•159 comments

Reverse-engineering the 1998 Ultima Online demo server

https://draxinar.github.io/articles/2026-05-01-uodemo-reverse-engineering.html
196•notsentient•13h ago•51 comments

Going Full Time on Open Source

https://jdx.dev/posts/2026-04-17-going-full-time-on-open-source/
78•thunderbong•2h ago•7 comments

Multi-stroke text effect in CSS

https://yuanchuan.dev/multi-stroke-text-effect-in-css
268•cheeaun•15h ago•37 comments

Batteries Not Included, or Required, for These Smart Home Sensors

https://coe.gatech.edu/news/2026/04/batteries-not-included-or-required-these-smart-home-sensors
171•gnabgib•3d ago•61 comments

245TB Micron 6600 ION Data Center SSD Now Shipping

https://investors.micron.com/news-releases/news-release-details/industry-leading-245tb-micron-660...
216•neilfrndes•16h ago•158 comments

CNN founder Ted Turner, a pioneer of cable TV news, dies at 87

https://www.cnn.com/2026/05/06/us/ted-turner-death
123•pseudolus•4h ago•94 comments

Coverage Cat (YC S22) Seeks Fractional Engineer to Build AI Growth Toolkit

https://www.coveragecat.com/careers/engineering/fractional-growth-engineer
1•botacode•7h ago

Proton Meet

https://proton.me/business/blog/introducing-proton-meet
36•Einenlum•1h ago•6 comments

Google Cloud fraud defense, the next evolution of reCAPTCHA

https://cloud.google.com/blog/products/identity-security/introducing-google-cloud-fraud-defense-t...
42•unforgivenpasta•1h ago•31 comments

SoundOff: Low-Cost Passive Ultrasound Tags

https://yibo-fu.com/SoundOff-Low-cost-Passive-Ultrasound-Tags-for-Non-invasive-and-Non
7•jonbaer•2h ago•1 comments

Wolfenstein 3D for Gameboy Color on custom cartridge (2016)

https://www.happydaze.se/wolf/
115•ksymph•2d ago•25 comments

YouTube, your RSS feeds are broken

https://openrss.org/blog/youtube-your-feeds-are-broken
293•veeti•18h ago•102 comments

The Thinking Plant's Man (2025)

https://www.sciencehistory.org/stories/magazine/the-thinking-plants-man/
48•benbreen•2d ago•11 comments

Agents can now create Cloudflare accounts, buy domains, and deploy

https://blog.cloudflare.com/agents-stripe-projects/
592•rolph•16h ago•343 comments

StarFighter 16-Inch

https://us.starlabs.systems/pages/starfighter
624•signa11•17h ago•341 comments

Show HN: Tilde.run – Agent Sandbox with a Transactional, Versioned Filesystem

https://tilde.run/
92•ozkatz•3h ago•76 comments
Open in hackernews

Google Cloud fraud defense, the next evolution of reCAPTCHA

https://cloud.google.com/blog/products/identity-security/introducing-google-cloud-fraud-defense-the-next-evolution-of-recaptcha/
38•unforgivenpasta•1h ago

Comments

SoKamil•1h ago
Google clearly wants only Google approved models to traverse the web.
xacky•1h ago
The fact that mobile devices are now mandatory to prove "humanness" means that Google no longer trusts desktop/open platforms anymore.
dredmorbius•11m ago
Where is this specified? I don't see that in TFA.
mayama•1h ago
The site doesn't mention this. But, are they locking down QR code auth for only safetynet authenticated devices and with mobile number verification?
bobbiechen•1h ago
Yeah, I had the same question myself. I think that's what you would want to do to make it airtight (plus some amount of rate limiting or flagging for devices that are part of dedicated device farms).

But even if not, there's still value in raising the barrier to entry. For example, you can buy 1000 reCaptcha solves for $1-2 from various captcha-solver services. And yet that $0.001-per-request fee does discourage mass-scale bot attacks.

Hizonner•55m ago
... You... think... it would be a good thing.

Don't you...

arian_•1h ago
Google building harder walls against bots while simultaneously building AI agents that need to get through them is peak 2026.
tardedmeme•51m ago
They're expecting everyone to whitelist Google agents because Google has the market share for people to complain if Google agents don't work.
throwaway67743•30m ago
With the apparent competence that built Gemini, I have zero faith in Google building or doing anything that works anymore.
mandeepj•6m ago
Point On! Probably done by two different teams, who don't know about each other. I hate this (re)captcha so bad. They assume everyone is bad.
stupidgeek314•1h ago
Why can't an AI scan the QR code? Just fire up an emulator if necessary
tardedmeme•50m ago
The app that scans the code talks to the TPM in your phone to prove that your phone is running an unmodified Google OS.
hellojesus•48m ago
I know that's the final destination, but I didn't see that listed in the requirements page linked above. Any proof of this affecting the current implementation?
themafia•26m ago
Which would be meaningful if phones weren't remotely controllable.

So the net effect is every AI agent will also have and connect to a physical phone.

tardedmeme•17m ago
The official Google OS won't feature remote-control software.
Hizonner•12m ago
... which is why you'll get locked out if you happen to visit an unusual number of sites in a day.
bramhaag•1h ago
The requirements for the mobile devices are listed here: https://support.google.com/recaptcha/answer/16609652

So it seems that you will need a modern Android device with Google Play Services installed or a modern iPhone/iPad to be allowed to browse the web in the future.

No mention of device integrity verification yet, but the writing is on the wall.

Hizonner•58m ago
... or you'll need to stop using reCAPTCHA if you want to get any traffic on your Web site.

I know, people will slavishly knuckle under, but let me dream for a few minutes.

tardedmeme•52m ago
99.999% of people don't give a shit and don't even know what this means. They'll follow the instructions. These are the same 99.999% of people who press win+R ctrl+V enter when the captcha prompts them to. Because do this to see the dancing bunnies.
mrguyorama•33m ago
They will do exactly as it says while also ceaselessly complaining, completely unable to connect their choice to use a website with the pain of using that website.

There's some sort of serious issue with learned helplessness or something

ronsor•20m ago
Yeah, this is going to turn into another malware vector, isn't it?
tardedmeme•16m ago
Discord has a feature where you can log into your account on your PC by scanning a code on your phone.

So does Binance.

hellojesus•51m ago
This is going to make my grapheneos journey a bit more exciting. How wild to force users through an official google identification for web browsing.

Does the iPhone recaptcha app force you to login with a Google account? Seems we didn't need ID verification for the web to lose all anonymity.

everdrive•49m ago
I've been saying for years that it does not make sense to browse the web on a smartphone. Eventually things will get bad enough that people will agree with me.
NotPractical•10m ago
> No mention of device integrity verification yet

If Google Play services is listed as a requirement, that implies that a "certified Android" device capable of Play Integrity attestation is required, since that's the only officially supported way to obtain Google Play services. On consumer-facing support articles like this, they don't tend to get into the nitty gritty details like what APIs are being used. If MEETS_DEVICE_INTEGRITY is required, that would probably not be explicitly listed here.

E.g. the consumer documentation for Google Pay just says you need a "certified" Android device and a screen lock set up: https://support.google.com/wallet/answer/12200245

(Yes, if you go deep into the FAQ at the end it eventually states that if you rooted your phone, you can't use tap to pay, but that requirement is implied by the certification requirement [1].)

In Google's eyes, and in the eyes of the law due to trademarks filed by Google, Android == Google Android.

This feature would make little sense if it's not using device attestation because otherwise it would be easy to spoof. I expect that it will initially not use it, and they will start A/B testing device attestation in the coming years.

[1] Expand "What to do if you see device is not certified" -> "Reset device to fix issue" https://support.google.com/android/answer/7165974

nerdsniper•7m ago
I believe you'll also need bluetooth enabled on both devices. At least you do for those "scan this QR code displayed on your computer to authenticate using the passkey on your phone" feature, which this seems analogous to. Bluetooth is used to ensure that the two devices are actually physically co-located.
mrguyorama•30m ago
Google and the reCAPTCHA network aren't even that good with fraud prevention. You would think being literally omniscient over the whole internet would make it trivial to catch account takeovers, and Gmail has a proven track record at resisting account takeover, but when we tried to integrate their fraud signals, they were worthless, worse than the rest of the industry, worse than our homegrown trash from a decade ago.

Because Google doesn't actually care about preventing fraud, they just want the data you feed them and the fraud feedback you provide. It's all take, no mutual business.

amazingamazing•23m ago
How are people stopping bots reliably?