4.14.26 | Someone planted backdoors in 30 WordPress plugins, GitHub introduced Stacked PRs, DaVinci Resolve now supports Photo editing
Failed to add items
Add to basket failed.
Add to wishlist failed.
Remove from wishlist failed.
Adding to library failed
Follow podcast failed
Unfollow podcast failed
-
Narrated by:
-
By:
About this listen
Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights
- (00:00) - Intro
- (00:19) - Someone bought 30 WordPress plugins and planted a backdoor in all of them
- (02:11) - GitHub Stacked PRs
- (03:33) - DaVinci Resolve – Photo
- (04:58) - Nothing Ever Happens: Polymarket bot that always buys No on non-sports markets
- (05:53) - US appeals court declares 158-year-old home distilling ban unconstitutional
- (07:07) - Make tmux pretty and usable (2024)
- (08:08) - A new spam policy for “back button hijacking”
- (09:45) - Android now stops you sharing your location in photos
- (11:27) - Building a CLI for all of Cloudflare
- (12:45) - Lean proved this program correct; then I found a bug
- (14:11) - Outro
Someone bought 30 WordPress plugins and planted a backdoor in all of them
https://anchor.host/someone-bought-30-wordpress-plugins-and-planted-a-backdoor-in-all-of-them/
https://news.ycombinator.com/item?id=47755629
GitHub Stacked PRs
https://github.github.com/gh-stack/
https://news.ycombinator.com/item?id=47757495
DaVinci Resolve – Photo
https://www.blackmagicdesign.com/products/davinciresolve/photo
https://news.ycombinator.com/item?id=47760529
Nothing Ever Happens: Polymarket bot that always buys No on non-sports markets
https://github.com/sterlingcrispin/nothing-ever-happens
https://news.ycombinator.com/item?id=47753472
US appeals court declares 158-year-old home distilling ban unconstitutional
https://nypost.com/2026/04/11/us-news/us-appeals-court-declares-158-year-old-home-distilling-ban-unconstitutional/
https://news.ycombinator.com/item?id=47751781
Make tmux pretty and usable (2024)
https://hamvocke.com/blog/a-guide-to-customizing-your-tmux-conf/
https://news.ycombinator.com/item?id=47752819
A new spam policy for “back button hijacking”
https://developers.google.com/search/blog/2026/04/back-button-hijacking
https://news.ycombinator.com/item?id=47760764
Android now stops you sharing your location in photos
https://shkspr.mobi/blog/2026/04/android-now-stops-you-sharing-your-location-in-photos/
https://news.ycombinator.com/item?id=47750669
Building a CLI for all of Cloudflare
https://blog.cloudflare.com/cf-cli-local-explorer/
https://news.ycombinator.com/item?id=47753689
Lean proved this program correct; then I found a bug
https://kirancodes.me/posts/log-who-watches-the-watchers.html
https://news.ycombinator.com/item?id=47759709