A new game titled Size-It-Up has been shared on Hacker News, linking to its page at magnitudle.com. The post received 6 points and no comments at the time it was captured. The source material provides only the title, link, and engagement figures, with no description of gameplay, developers, or release details. Further information about the game's mechanics or purpose is not available from the item itself.
Perplexity has announced a new set of AI agents aimed at handling workplace tasks. The company describes them as teammates built for complex, ongoing work rather than one-off queries. The announcement was shared through a blog post on Perplexity's website. The source article provided limited detail beyond the headline and its title, so specifics on capabilities, pricing, and availability are not confirmed here. The story gained modest traction on Hacker News, where it drew a few points and a single comment.
Researchers at Crissy Field examined 159,041 Lovable projects, of which 34,545 used Supabase. Of 24,664 sites examined more closely, many were already serving database records to visitors without any login. Further read-only requests with the public key surfaced email addresses in thousands of sites, along with more sensitive items such as passport details and chat messages. The authors caution that data appearing on first load is not automatically a confirmed leak, and the roughly 30% figure applies only to the sampled sites, not all Lovable apps. Security advisers stress that anon keys are meant to be public, so the real risk lies in missing or permissive row-level security rules.
The phrase 'where is my parcel' is a common after-sale message that can carry very different meanings depending on context. Buyers may be impatient while still inside the delivery window, anxious after it has closed and tracking has stalled, or weighing a return or dispute. Replying only to the literal tracking question fits none of these situations well. Support teams are advised to check order age against the promised window, message history, carrier status, and wording before responding. The reply should then match the situation: a date for nudges, a concrete plan for anxious buyers, and a clear decision point for those considering returns.
A developer who builds Flockbay, one of three Godot AI tools, compares it against Ziva and Summer Engine as of October 2026. Ziva is a proprietary plugin for Godot 4.2 and later that works inside the existing editor, with hosted models from $20 a month. Summer Engine is a separate proprietary engine built on a Godot 4.7.2 base, offering hosted AI at $20, $60 or $200 monthly. Flockbay supports Godot 4.6 and later, bundles the official engine, and offers free AI. The two rivals disagree on whether Ziva can actually run and playtest a game, and the article notes that each product's comparison page was written by its own maker.
Knowing where personal data sits is a prerequisite for encrypting, masking, or deleting it, and regulations such as GDPR Article 30 require a record of the categories processed. A plain regex scan tends to flag harmless values like order numbers, timestamps, and SKUs, which makes its reports hard to use. The article presents a Python scanner that samples each column with reservoir sampling, uses regexes to find candidates, and then validates them with checksums and format rules such as Luhn, mod-97 for IBANs, and SSA rules for SSNs. It combines validation results with the column name to assign a per-column confidence score and writes an inventory in JSON and Markdown. The author tests the approach on a synthetic SQLite database and CSV files, and compares the results with Microsoft Presidio.
A man named Haider Ansari reportedly died after being assaulted by tour operators whom he had confronted about his parents. According to a police complaint, his parents had travelled to Saudi Arabia on October 7 for Umrah. They were due back on October 24, but had still not returned days later, which left Ansari increasingly worried. The complaint describes how he pressed the operators for answers about their whereabouts. He was then beaten, and he later died from his injuries.
Pasting a Postgres query into a general-purpose online SQL formatter usually looks fine, but breaks on constructs like :: casts, JSON operators, and dollar-quoted function bodies. The author explains that these tools tokenise text rather than understand SQL, while PostgreSQL bends token rules more than other dialects. Pinning the formatter to the PostgreSQL dialect avoids this guessing, and identifier case must be preserved because unquoted names fold to lowercase. Tools like pgFormatter parse plpgsql properly and suit repository or CI use, while pgAdmin and psql offer little in the way of formatting. The author's browser-based, dialect-pinned formatter runs locally so queries containing real data are not transmitted, though it cannot verify schema or query plans.
A link to a translated edition of Pliny the Younger's letter on ghosts, from Book 7 of his Letters, was shared on Hacker News. The article is hosted on vroma.org, a site presenting classical Roman texts. The post received 4 points and no comments at the time of listing. The item was submitted as a standalone link without accompanying discussion or commentary.
Kohei Matsunobe, a second-year online student at ZEN University aiming to become an AI engineer, built a retrieval-augmented generation demo for Japanese PDFs. Users upload documents, ask questions in Japanese, and receive answers citing file names and page numbers. The app uses multilingual-e5-small with FAISS for retrieval and Google Gemini for generation, with an extractive fallback mode when no API key is provided. The author wrote a custom chunker that splits text by character count at sentence boundaries and never crosses page breaks, prioritizing citation accuracy. The system prompt restricts answers to the retrieved passages and instructs the model to say it doesn't know when the answer isn't present.
A co-founder of TrustCheck, a Ghana-based platform that helps people verify businesses, prices and cars before paying, describes building tools on free US government APIs. The NHTSA endpoints require no API key or sign-up and can decode a 17-character VIN into make, model, year and engine details. They also provide recall records, owner-filed complaints with crash and injury counts, official crash test ratings, and standardized model names. The author notes practical pitfalls, such as checking error codes on imported cars and spelling model names the way NHTSA records them. The approach is especially relevant in Ghana, where used cars older than 15 years can no longer be imported.
A developer guide argues that apps serving generated reports should let browsers upload straight to private object storage using server-issued presigned URLs. Under this approach, the application server authenticates the customer, issues a short-lived signed URL, and records the object key, keeping report data off the proxy. The article notes that storage retention and request volume often drive costs more than transfer fees, so teams should track storage, requests, and egress and assign retention classes to each report. It also advises keeping metadata such as report hashes even after blobs are deleted, to ease recovery if a support ticket reopens. A sample Python client demonstrates presigned URL creation with retry handling for rate limits and idempotency keys.
Indie iOS developer Kohei Matsunobe, a student at ZEN University, describes the generative-AI feature added to his digital goshuin app KamiMeg in version 1.1.0. A 'companion deity' introduces a shrine only when the user presses a button, rather than generating text automatically. To keep the API key off the device, the app routes requests through Amazon API Gateway and AWS Lambda to Google's Gemini API. The author explains that the design also preserves the app's core promise that goshuin photos and visit records stay on the user's device. He notes that the setup lets the AI provider be swapped without an app update, which he later relied on when choosing Gemini over Bedrock and the Claude API.
Agentic shopping has AI agents handle research, comparison and, increasingly, purchasing on the shopper's behalf after the shopper states their needs. OpenAI launched a shopping research feature in November 2025 and Instant Checkout in September 2025, which lets some US users buy from Etsy sellers within ChatGPT. Google began rolling out agentic checkout on Search in November 2025 with select US merchants and added a feature where AI calls nearby stores to check stock and prices. Amazon's Rufus assistant is available to US customers, while its Buy for Me feature is in beta for a subset of users. Perplexity, Microsoft's Copilot and PayPal have also introduced in-chat checkout options, though the companies describe these offerings as early.
Amazon is following up its earlier Melania Trump documentary with a two-part Prime Video series titled Melania: The Series. The show is scheduled to debut on November 20. According to a press release, it will cover previously untold stories about Trump's life, including the days right after the 47th Presidential Inauguration. The first episode, titled Family & Trust, focuses on Trump setting her priorities as she prepares to become First Lady.
Agentic payments are transactions an AI agent initiates and completes for a person within limits that person has set. The concept addresses three questions that traditional card systems were not designed to answer: whether the user authorized the agent, whether the request reflects the user's true intent, and who is accountable for errors or fraud. Several competing systems are emerging, including OpenAI and Stripe's Agentic Commerce Protocol, Google's AP2 framework built around signed mandates, Mastercard's Agent Pay, and Visa's Intelligent Commerce. Most of these narrow card credentials through tokens tied to a specific agent, merchant, or amount, while keeping a record of what the user approved. For merchants selling online, the shift means they may increasingly see that an order came from an agent, and they will need to handle those orders within these new frameworks.
Google Patents has no official API, and the paid SerpAPI route or free official options each cover only a single patent office. The Google Patents site loads its results from a JSON endpoint that accepts plain HTTP requests without a key. The article shows a Python implementation using only the standard library, along with the filters the endpoint accepts and what its responses look like. The results arrive nested in two levels and contain HTML-escaped text, which the author cleans with a regex and html.unescape. Keyword matching is loose rather than exact-phrase, so the author recommends reviewing top results and refining queries instead of relying on the total count.
For a period, the Olympic Games awarded gold medals in arts categories such as poetry, music, architecture, painting and sculpture alongside athletic events. These competitions were introduced in 1912 at the urging of Pierre de Coubertin. The Olympic founder reportedly took a literature gold medal while using two pseudonyms. Eventually, amateurism rules and waning interest brought the arts competitions to an end after the 1948 London Games.
A new release, version 1.0.0, of a project called Flawless UI-UX Skill has been published on GitHub. The release was shared on Hacker News, where it received 4 points and no comments at the time of the source listing. The article content available is limited to the release page link and discussion metadata, so details about the project's features are not provided. Readers would need to visit the GitHub release page for further information about what the skill does.