Hacker News Highlights

4.14.26 | Someone planted backdoors in 30 WordPress plugins, GitHub introduced Stacked PRs, DaVinci Resolve now supports Photo editing


Listen Later

This is a recap of the top 10 posts on Hacker News on Apr 14, 2026.

Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights

  • (00:00) - Intro
  • (00:19) - Someone bought 30 WordPress plugins and planted a backdoor in all of them
  • (02:11) - GitHub Stacked PRs
  • (03:33) - DaVinci Resolve – Photo
  • (04:58) - Nothing Ever Happens: Polymarket bot that always buys No on non-sports markets
  • (05:53) - US appeals court declares 158-year-old home distilling ban unconstitutional
  • (07:07) - Make tmux pretty and usable (2024)
  • (08:08) - A new spam policy for “back button hijacking”
  • (09:45) - Android now stops you sharing your location in photos
  • (11:27) - Building a CLI for all of Cloudflare
  • (12:45) - Lean proved this program correct; then I found a bug
  • (14:11) - Outro

  • Someone bought 30 WordPress plugins and planted a backdoor in all of them
    https://anchor.host/someone-bought-30-wordpress-plugins-and-planted-a-backdoor-in-all-of-them/
    https://news.ycombinator.com/item?id=47755629

    GitHub Stacked PRs
    https://github.github.com/gh-stack/
    https://news.ycombinator.com/item?id=47757495

    DaVinci Resolve – Photo
    https://www.blackmagicdesign.com/products/davinciresolve/photo
    https://news.ycombinator.com/item?id=47760529

    Nothing Ever Happens: Polymarket bot that always buys No on non-sports markets
    https://github.com/sterlingcrispin/nothing-ever-happens
    https://news.ycombinator.com/item?id=47753472

    US appeals court declares 158-year-old home distilling ban unconstitutional
    https://nypost.com/2026/04/11/us-news/us-appeals-court-declares-158-year-old-home-distilling-ban-unconstitutional/
    https://news.ycombinator.com/item?id=47751781

    Make tmux pretty and usable (2024)
    https://hamvocke.com/blog/a-guide-to-customizing-your-tmux-conf/
    https://news.ycombinator.com/item?id=47752819

    A new spam policy for “back button hijacking”
    https://developers.google.com/search/blog/2026/04/back-button-hijacking
    https://news.ycombinator.com/item?id=47760764

    Android now stops you sharing your location in photos
    https://shkspr.mobi/blog/2026/04/android-now-stops-you-sharing-your-location-in-photos/
    https://news.ycombinator.com/item?id=47750669

    Building a CLI for all of Cloudflare
    https://blog.cloudflare.com/cf-cli-local-explorer/
    https://news.ycombinator.com/item?id=47753689

    Lean proved this program correct; then I found a bug
    https://kirancodes.me/posts/log-who-watches-the-watchers.html
    https://news.ycombinator.com/item?id=47759709

    ...more
    View all episodesView all episodes
    Download on the App Store

    Hacker News HighlightsBy Hacker News Highlights