A developer describes being asked how they test websites and then actually running the checks they’d only described. A contact form saved requests in WordPress, the admin UI showed the submission, and WordPress reported the email as sent, while the server’s mail program accepted the message and immediately marked it deferred - so nothing reached an inbox. The developer wrote a tool that queried every WordPress site on the same server: of 31 sites, 29 claimed delivery while no email left the server. The point is concrete: success return values, log lines, and 200 status codes are not the same as the real-world outcome of a person receiving an email; a written testing claim must include a live check.
A separate real-device check found a UI bug a headless browser missed: a yellow “request an estimate” bar overlapped the hero’s yellow button on iPhone, creating duplicated controls that didn’t appear in automated layout checks. The author fixed the mail flow so a proof email landed in the client’s inbox and deployed new imagery for a site owner, noting that one honest test revealed failures and enabled repairs - with twenty-nine more sites left to bring from false success to verified delivery.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Researchers at The Citizen Lab uncovered a campaign called 'AdFection' where spyware infects phones silently through targeted online ads. Zero-click attacks like this pose a significant threat because they can install malware without any user interaction, making protection difficult. (wired.com)
Canada's proposed surveillance law aims to mandate backdoors in encryption, prompting companies like Signal, Apple, and Meta to consider leaving the country. Governments worldwide continue to push for legislation that threatens encryption's security, despite experts warning such flaws are impossible to implement safely. (wired.com)
A freelance investigator infiltrated the highest ranks of American militias, including doctors and attorneys, without informing authorities or family. He collected and shared a trove of encrypted documents revealing internal militia activities and plans. (propublica.org)
Meta removed the No Kings Instagram account during a protest day. The action appears to be influenced by government pressure, raising concerns about social media censorship. (meidasnews.com)
Strikes on Yandex data centers in Russia led to an 84% decline in bot activity, especially on Facebook and Telegram. The attacks caused the shutdown of key facilities, significantly reducing the dissemination of inauthentic content. (cpd.gov.ua)
A retired Penn professor was arrested for blocking an Uber Eats robot during a protest. The incident highlights tensions over sidewalk space and delivery robot operations. (phillyvoice.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.