Federal agents detained activist Samuel Tunick at an airport on Jan. 24, 2025, and internal messages show Homeland Security operatives labeled him under investigation for "suspected terrorist activities" three hours before his flight landed and instructed baggage to be searched, electronics retained and passcodes collected. Tunick’s public defenders say officers then told him they were searching for pedophiles and child pornography even though testimony from a Customs and Border Protection officer, Findley, conceded there was no basis to believe Tunick possessed such material. Officers pressed him for a password after he asked for a lawyer, threatening to seize the phone and hand it to the FBI; when Tunick supplied a passcode the device appeared to restart and unlock failed, and officers found no illegal items on his person.
Prosecutors later convened a grand jury and in November 2025 charged Tunick with a single count of deleting phone contents to obstruct seizure, a charge carrying up to five years. His lawyers contend the child-porn claims were a manufactured pretext to enable a broad search of his devices tied to his activism with Defend the Atlanta Forest, which federal authorities have characterized as an “Anti-Government, Anti-Authority Violent Extremist Group” without showing Tunick committed any related crimes. The U.S. attorney’s office pursuing the case has linked other prosecutions in the district to a White House-directed initiative targeting political violence; prosecutors must respond to defense filings by Nov. 9.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A PHP vulnerability currently has no working exploit, despite many fake PoCs circulating online. LLMs have falsely been portrayed as able to develop exploits, but practical testing shows no effective attack exists yet. (eliastaylor.com)
The Trump administration denaturalized two individuals who obtained U.S. citizenship by hiding their criminal activities. The move aims to revoke citizenship from those who gained it through fraudulent means. (justice.gov)
Meta's new enterprise terms state that if its AI makes a mistake, the customer is legally responsible. The terms also expand liability to content from partners and give Meta rights to scrape and use user content. (cio.com)
A vulnerability in HTTP/3 implementations allows remote clients to cause servers to allocate excessive memory by exploiting QPACK header compression. Seven of ten tested implementations are vulnerable, with some already patched to prevent resource exhaustion. (foxio.io)
Oracle has issued a security alert for CVE-2026-91403, affecting multiple Java and GraalVM products. Patches are available for supported versions, and Oracle recommends upgrading to ensure security. (oracle.com)
Help desks are increasingly targeted by social engineering attacks to reset MFA accounts. Effective verification methods for remote staff and contractors are being explored to prevent breaches. (news.ycombinator.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.