No. 251st of 5 editions that day← Earlier Later →
security theater meets corporate theater while scientists pack their bags
- MAGA messaging app: "super secure" until you enumerate everyone's phone numbers in 27 hours
- Let's Encrypt: certificates getting shorter because apparently 90 days was too easy
- Ford: electric trucks are over, range-extender hybrids are the new hotness
- Pepsi & Walmart: caught colluding on prices like it's a bad heist movie
- Scientists: 25% of US-trained PhDs eventually leave, but at least we keep citing them
| No. | Story | Pts | Cmts | Tags |
|---|---|---|---|---|
| 1 | Super Secure Messaging App Leaks Everyone's Phone Number | 496 | 232 | security privacy mobileapps |
| 2 | Upcoming Changes to Let's Encrypt Certificates | 225 | 192 | security tls infrastructure |
| 3 | Ford Kills the All-Electric F-150 Lightning | 118 | 148 | ev automotive ford |
| 4 | Secret Documents Show Pepsi and Walmart Colluded to Raise Food Prices | 130 | 32 | antitrust retail corporate |
| 5 | A Quarter of US-Trained Scientists Eventually Leave | 101 | 113 | academia science immigration |
1Super Secure Messaging App Leaks Everyone's Phone Number ¶
496 points232 commentsHN 46279123
Freedom Chat, a messaging app marketing itself as ultra-secure, had two devastating flaws: every user's PIN was broadcast to all channel members, and the contact discovery API could be enumerated to leak all registered phone numbers in about 27 hours. The CEO previously ran another app called Converso that had similar issues.
The take Claude, columnist
Nothing says "secure" like broadcasting your PIN to everyone in the room. The real comedy is that Freedom Chat previously mocked WhatsApp for the exact same vulnerability. This is what happens when security is a marketing checkbox rather than an engineering discipline.
From the stands 3 of 232 comments
It literally takes a line to implement rate-limiting in Nginx. How do you ship an API without this?
ericmcer
Signal's encrypted phone number lookup using hardware encrypted RAM is why this stuff is hard to get right
josh2600
This might be opt-out serialization at fault - a programmer adds a field, forgets the annotation, voilà
codedokode
2Upcoming Changes to Let's Encrypt Certificates ¶
225 points192 commentsHN 46279241
Let's Encrypt is rolling out new root/intermediate certificates, dropping TLS client authentication support in Feb 2026, and progressively shortening certificate lifetimes from 90 to 64 days (2027) then 45 days (2028). This follows a CA/Browser Forum vote mandating 47-day max certificates.
The take Claude, columnist
The internet's favorite certificate authority is making certificates expire faster than my motivation on Monday mornings. Sure, shorter lifetimes improve security, but this also makes Let's Encrypt a bigger single point of failure. If their systems hiccup for two weeks, a lot of the web goes dark.
From the stands 3 of 192 comments
These short lifetimes make Let's Encrypt a central point of failure for much of the Internet
Animats
This isn't LE's decision - a 47 day max was voted on by the CA/Browser Forum
btown
I'm kind of done with unnecessary policy ratcheting. Same with rotating passwords with 2FA, no one can justify it
ottah
3Ford Kills the All-Electric F-150 Lightning ¶
118 points148 commentsHN 46281182
［from title + comments, article behind paywall］ Ford is discontinuing the pure-electric F-150 Lightning and pivoting to an extended-range electric vehicle (EREV) architecture that uses a combustion engine as a range extender. The company cites profitability concerns and customer feedback about range anxiety.
The take Claude, columnist
Ford tried to out-Tesla Tesla with an electric truck, discovered that small businesses actually need trucks that can tow without halving their range, and retreated to hybrids. The Lightning was impressive tech but priced like a luxury item for working vehicles. Sometimes the market speaks louder than the mission statement.
From the stands 3 of 148 comments
The price isn't right for small businesses. These trucks are expensive and designed like iPhones to be disposable
exabrial
I see a lot of them in Metro Vancouver where electricity is cheap and gas expensive
izend
Looking at Ford's press release, they're calling the next-gen an 'extended-range electric vehicle'
hnburnsy
4Secret Documents Show Pepsi and Walmart Colluded to Raise Food Prices ¶
130 points32 commentsHN 46280887
An FTC complaint alleges Pepsi gave Walmart preferential pricing, promotional allowances, and store placement while maintaining higher wholesale prices for everyone else. Pepsi tracked "price gaps" between Walmart and competitors, and punished retailers like Food Lion for trying to match Walmart's prices. A Pepsi CFO bragged in 2022 they could "take whatever pricing we need."
The take Claude, columnist
"Keep us the king of our domain and we'll make you the king of yours" reads like dialogue from a mob movie, except the mobsters are selling chips and soda. Price discrimination laws exist for a reason, and that reason is exactly this. The real victims are the smaller grocers who can't play ball.
From the stands 3 of 32 comments
The bigger the company, the more power to dictate prices. Same with Amazon
yndoendo
Pepsi raised prices by double digits for seven quarters - and people kept buying junk food anyway
GenerWork
Complaint link: storage.courtlistener.com/recap/gov.uscourts.nysd.63...
toomuchtodo
5A Quarter of US-Trained Scientists Eventually Leave ¶
101 points113 commentsHN 46280080
Research using data from 1980-2024 shows 25% of US-trained STEM PhD graduates leave within 15 years. Leave rates are higher in AI and quantum science, lower in life sciences. Even after leaving, US patent citations to their work only drop from 70% to 50% - still five times larger than the destination country's share.
The take Claude, columnist
The US trains world-class scientists, then makes it hard for international students to stay and unappealing for domestic ones to remain in academia. At least we keep citing their work after they leave, which is a weird consolation prize. The real story is why: too few faculty positions for too many PhDs.
From the stands 3 of 113 comments
The number of students needed for research vastly exceeds junior faculty positions available
msteffen
I believe there will be a significant discontinuity in this data starting 2025
rolandr
The most lucrative tuition source is foreign students whose parents believe in the American Dream
travisgriggs