The leak comprises two independent datasets: ten AfD mailboxes and the WordPress databases of afd.de plus ~140 party sites. The email corpus contains 421,178 distinct messages (Message-ID deduplicated), 93,635 addresses, and spans March 2013 to 14 September 2026. Threads defined by Message-ID links yield 300,807 thread roots or 49,554 multi-email conversations; 84% of threads are single-message, and 98,919 referenced emails are missing, showing the mailboxes are incomplete. Folder counts and address counts differ because an email can be delivered to a mailbox without the mailbox’s address appearing in headers (BCCs, aliases, lists); some folders mainly hold other people’s mail (e.g., bundesschiedsgericht@) while individual inboxes show different time windows.
Senders are categorized algorithmically (spam, AfD, politics/state, automated/newsletters, private persons, companies). AfD domains produce about 53% of emails (221,769 messages from 2,785 addresses across 428 domains), private persons 18% (17,247 addresses, mostly one-offs), companies 15%, automated mail 10%, politics/state 2%, and conservative spam ~2% (8,618 by rules). The communication network has 77,610 nodes and 294,621 directed sender→recipient pairs in one large cluster holding 86% of addresses; a few party hubs and mass-mailers dominate, most edges are one-way, and only 13% of pairs exchanged messages both ways.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A PHP vulnerability currently has no working exploit, despite many fake PoCs circulating online. LLMs have falsely been portrayed as able to develop exploits, but practical testing shows no effective attack exists yet. (eliastaylor.com)
The Trump administration denaturalized two individuals who obtained U.S. citizenship by hiding their criminal activities. The move aims to revoke citizenship from those who gained it through fraudulent means. (justice.gov)
Meta's new enterprise terms state that if its AI makes a mistake, the customer is legally responsible. The terms also expand liability to content from partners and give Meta rights to scrape and use user content. (cio.com)
A vulnerability in HTTP/3 implementations allows remote clients to cause servers to allocate excessive memory by exploiting QPACK header compression. Seven of ten tested implementations are vulnerable, with some already patched to prevent resource exhaustion. (foxio.io)
Oracle has issued a security alert for CVE-2026-91403, affecting multiple Java and GraalVM products. Patches are available for supported versions, and Oracle recommends upgrading to ensure security. (oracle.com)
Help desks are increasingly targeted by social engineering attacks to reset MFA accounts. Effective verification methods for remote staff and contractors are being explored to prevent breaches. (news.ycombinator.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.