Hacker News: Ask HN

Ask HN: Who is using OpenClaw?

misterchocolat — Wed, 15 Apr 2026 19:22:10 +0000

I don't use it personally, and neither does anyone in my circle...even though I feel like I'm super plugged into the ai world

Comments URL: https://news.ycombinator.com/item?id=47783940

Points: 333

# Comments: 373

Tell HN: Fiverr left customer files public and searchable

morpheuskafka — Tue, 14 Apr 2026 18:56:40 +0000

Fiverr (gig work/task platform, competitor to Upwork) uses a service called Cloudinary to process PDF/images in messaging, including work products from the worker to client.

Besides the PDF processing value add, Cloudinary effectively acts like S3 here, serving assets directly to the web client. Like S3, it has support for signed/expiring URLs. However, Fiverr opted to use public URLs, not signed ones, for sensitive client-worker communication.

Moreover, it seems like they may be serving public HTML somewhere that links to these files. As a result, hundreds are in Google search results, many containing PII.

Example query: site:fiverr-res.cloudinary.com form 1040

In fact, Fiverr actively buys Google Ads for keywords like "form 1234 filing" despite knowing that it does not adequately secure the resulting work product, causing the preparer to violate the GLBA/FTC Safeguards Rule.

Responsible Disclosure Note -- 40 days have passed since this was notified to the designated vulnerability email (security@fiverr.com). The security team did not reply. Therefore, this is being made public as it doesn't seem eligible for CVE/CERT processing as it is not really a code vulnerability, and I don't know anyone else who would care about it.

Comments URL: https://news.ycombinator.com/item?id=47769796

Points: 818

# Comments: 231

Ask HN: I quit my job over weaponized robots to start my own venture

barratia — Tue, 14 Apr 2026 11:31:19 +0000

Two weeks ago, I quit my job at a robotics company. I was working with high-end hardware (Boston Dynamics, Unitree), but I found out they were planning to mount teleoperated weapons on the robotic platforms for a demo. I’m not willing to go there, so I resigned without another offer.

I’ve decided this is the right time to go back to entrepreneurship. We're at an incredible moment for embodied intelligence, but I feel the tools and workflows we use to interact, monitor, and control these platforms are still lagging behind.

I'm currently exploring a couple of projects around how we build, test, and interact with robots. As part of my customer discovery phase, I'm trying to gather raw data on how roboticists and developers actually work day to day and what their main pain points are regarding control interfaces.

I put together a very short survey (3 mins) to validate some ideas. If you work in robotics, embedded systems, or just tinker with hardware, your input would be incredibly valuable:

Survey link: https://forms.gle/3Nm76wkeT5CMt23c8

I'm also open to discussing the ethical lines in modern robotics or anything related to ROS2 / HRI in the thread. Thanks for reading!

Comments URL: https://news.ycombinator.com/item?id=47764215

Points: 118

# Comments: 86

Ask HN: What Are You Working On? (April 2026)

david927 — Sun, 12 Apr 2026 16:24:43 +0000

What are you working on? Any new ideas that you're thinking about?

Comments URL: https://news.ycombinator.com/item?id=47741527

Points: 344

# Comments: 1166

Tell HN: OpenAI silently removed Study Mode from ChatGPT

smokel — Sun, 12 Apr 2026 13:20:58 +0000

Here's hoping that it will return soon, as I really liked it.

Comments URL: https://news.ycombinator.com/item?id=47739305

Points: 187

# Comments: 77