WaveDigger is a web tool for locating wireless infrastructure by querying Apple's WLOC service: it accepts Wi‑Fi BSSIDs (MAC addresses) and cellular identifiers for LTE and 5G NR and plots results on an interactive deck.gl map. Key features include automatic formatting/validation of BSSID inputs in multiple formats, LTE and NR cell lookups (MCC, MNC, TAC, Cell ID or NCI), NR searches that return the target cell plus surrounding cluster cells, search history, responsive UI, and optional Mapbox tiles. Built with Next.js and TypeScript, the frontend uses react-map-gl and Tailwind CSS; a hosted demo is available and development requires Node.js 24+.
WaveDigger implements Apple's real WLOC API using protobuf definitions from apple-corelocation-experiments, handling Apple’s int64 coordinate encoding (8 decimal places) and supporting region endpoints including China. Requests are sent to gs-loc.apple.com/clls/wloc. The README documents installation (npm install, npm run dev), testing with real BSSIDs (not all MACs are present in Apple’s database), and planned features such as JSON/CSV export and TAC-cluster browsing. The project is released under AGPL-3.0, which requires publishing modified source if the service is run publicly.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
China has implemented new travel regulations that are causing concern among technology companies and professionals. These rules are impacting the movement of talent and the operations of tech giants within the country. (dw.com)
OSCE's ODIHR organization will now consider reports of alleged election fraud in Sweden for future assessments. Several criminal investigations into suspected vote-rigging and vote-buying have been launched after the recent election, along with a surge in election result appeals. (tv4.se)
A Reddit moderator was ordered to pay Nintendo $4.5 million for operating Switch piracy shops. Nintendo accused James 'archbox' Williams of running illegal stores selling pirated Switch games. (theverge.com)
Nearly half of 4,688 small-business websites in a 2026 study did not implement any of seven key security headers. The study highlights widespread gaps in web security practices among small local businesses. (rackcrunch.com)
The Cutting Room Floor wiki was taken offline after a DDoS attack allegedly triggered by an banned AI user using Claude Code. The user reportedly evaded a ban, provoked anti-AI content, and sent abuse reports to the hosting provider. (kotaku.com)
A vulnerability in ansi2html.py allowed attackers to inject malicious scripts into build logs on builds.sr.ht, leading to account takeovers through XSS exploits. The flaw was wormable, affecting viewers of compromised logs and highlighting security risks in CI platforms. (blog.arusekk.pl)
Today's best Hacker News stories, summarized and screenshotted, one email a day.