Hacker News

Subscribe to Hacker News feed
Hacker News RSS
Updated: 1 hour 57 min ago

The first racket sport smart wearable

Thu, 07/23/2026 - 5:15pm

Article URL: https://aurevo-rose.vercel.app/

Comments URL: https://news.ycombinator.com/item?id=49028155

Points: 1

# Comments: 1

Categories: Hacker News

Show HN: Skim – a minimalist open-source email client for Windows (MIT)

Thu, 07/23/2026 - 5:12pm

I built Skim because I was super dissatisfied with all existing Windows clients.

I mean, it's not a rocket science, there should be some lightweight modern solution, isn't it? So I decided to create a client that just, you know, MAKES SENSE and has design younger than dinosaurs.

Key points:

* Obsessed with installer size: it should be under 5Mb.

* BYOK AI. Cowriter, agentic search, summarization and other AI stuff is powered by your own key for Anthropic/Openrouter, or you can connect your own OpenAI-compatible server (including local)

* No bloat. It should be as contextual as possible: gives you right button when you need it. No menu at all. No integrations. Just email.

* Instant startup, super modest on resources

* Cool warm zine design with paper colors and really calming vibes

It's MIT - contribution and stars are welcome!

Comments URL: https://news.ycombinator.com/item?id=49028120

Points: 1

# Comments: 0

Categories: Hacker News

Namecheap Gave My Account to an Unverified Third Party Just Because They Asked

Thu, 07/23/2026 - 5:05pm

I’ve been a NameCheap customer for 13 years. I’ve also helped out an old college club paying for a .com they use (that is registered to me under my name, address, and phone number). During a recent leadership transition, the incoming club lead wanted to make changes to the DNS and didn’t know to contact me. They figured out the domain name was parked at NameCheap, so they initiated a password reset using the domain name. I got a password reset email and immediately filed a NameCheap support ticket saying “I did not initiate this”. They called me to verify I was the one who filed the ticket, and then followed up with a canned email with tips like check your anti-virus.

The incoming club leader was persistent though, and called NameCheap support. He convinced them the domain registered in my name and address really belonged to his club, and with no verification or validation whatsoever, NameCheap changed my password, and changed the email address associated with my account. All because someone simply asked nicely on a phone call.

Meanwhile in the background, someone advised the new club leader who I was and we were able to connect and get things transferred over. Ultimately I was happy to give them access or even ownership if they wanted (student club turnover being what it is, it’s likely a domain doesn’t get renewed and gets gobbled up by a squatter, which is why I was keeping it current for them).

But NameCheap had no way of knowing any of this. As far as NameCheap was aware, this was a personal account of mine. They demonstrated they were perfectly able to pick up a phone and call me (to verify my initial support ticket) but when someone calls them and says “but I really want access to that account” they don’t bother?

I’d hesitate to even call this social engineering. It’s clearly a massive vulnerability. I’ve already moved a dozen of my most critical domains out of NameCheap after seeing just how easy it is for a third party to completely take over a NameCheap account: just ask nicely.

Comments URL: https://news.ycombinator.com/item?id=49028037

Points: 8

# Comments: 0

Categories: Hacker News

Exploring Gymflation with AI

Thu, 07/23/2026 - 5:02pm
Categories: Hacker News

Doctor Dario (Game)

Thu, 07/23/2026 - 5:00pm

Article URL: https://doctordario.ai/

Comments URL: https://news.ycombinator.com/item?id=49027994

Points: 1

# Comments: 0

Categories: Hacker News

Ask: Why does everything Microsoft create lately feel fragile and half-baked?

Thu, 07/23/2026 - 4:57pm

Microsoft has seemingly abandoned quality and craftsmanship a long time ago.

But more recently they are rushing to force-feed us unfinished AI and web apps just so they can stay in the AI hype race.

Call it teams, copilot, LinkedIn I've never liked anything that comes out of Ms lately, yet our company defaults to MS.

At what point should we tell our employers to say no to MS treating paying customers as unpaid bulk beta testers?

Comments URL: https://news.ycombinator.com/item?id=49027955

Points: 2

# Comments: 1

Categories: Hacker News

Pages