Google promised advance notice before handing user data to law enforcement. A Cornell Ph.D. student got the notification the same day Google already gave ICE his name, bank accounts, credit cards, and IP addresses. No judge signed off. DHS used an administrative subpoena.
A colleague who got the same subpoena from a different platform did get advance notice, challenged it, and the government backed down. Google had over a month. It gave zero days.
In today’s indie hacker news:
- Google broke its privacy promise to a student targeted by ICE
- Cal.com raised $32M on open source, then blamed AI for going closed
- Gemini 3.1 Flash TTS ships director’s notes at $1.80/hour
- A jury found Ticketmaster is an illegal monopoly
- Tennessee wants to make building chatbots a Class A felony
TOP STORIES
PROMISE BROKEN, DATA GONE
Google gave ICE a student’s bank details, then told him after
Amandla Thomas-Johnson, a Cornell Ph.D. candidate with a British/Trinidadian dual citizenship, had his student visa revoked after briefly attending a protest in September 2024. DHS sent Google an administrative subpoena in April 2025. Google complied on May 8, then notified Thomas-Johnson the same day. Google internally calls this “simultaneous notice.” The public policy page promises advance notice so users can challenge before disclosure. That promise was theater.
The details:
- Data handed over: name, IPs, phone numbers, credit cards, bank accounts, and every Google service used
- Administrative subpoenas require no judge. Any federal agency can issue one directly
- A colleague got the same subpoena, received advance notice, challenged it, and the government withdrew
- EFF filed complaints with California and New York AGs on April 14
- DHS has sent hundreds of admin subpoenas to Google, Meta, Reddit, and Discord to unmask ICE critics
Why builders care: If you build on Google’s auth or payments stack, your users’ financial data is one admin subpoena away from ICE. Google just proved it can skip the only challenge window entirely.
Work from any WiFi like it's your home network. NordVPN's Meshnet runs a free private mesh between your laptop, dev box, and home server. SSH from a café without exposing a port, the way you'd use Tailscale. The paid VPN on top lets you test geo-fenced Stripe checkouts or feature flags from any country.
We get a cut if you sign up. Only added for tools we use ourselves.
OPEN SOURCE RUG PULL V3
Cal.com raised $32M as “the open-source Calendly,” then blamed AI for locking the code
Cal.com moved its production codebase from AGPL to proprietary. Already done, not roadmap. They launched Cal.diy, an MIT-licensed fork stripped of team management, workflows, and analytics.
The stated reason: AI can now scan public code for vulnerabilities. CEO Bailey Pumfleet called open source “blueprints to the vault.”
The details:
- $32.4M total raised ($7.4M seed, $25M Series A). Investors include OSS Capital, YouTube co-founder Chad Hurley
- 41,241 GitHub stars, 12,713 forks on the repo
- Cal.com founded coss.com (a commercial open-source initiative) just last year
- HN commenters: 241 points, 180 comments. Near 1:1 ratio means maximum controversy
- Top HN rebuttal: “If LLMs are so good at finding vulnerabilities, run an LLM against your code after you commit”
Why builders care: If you self-host Cal.com, you’re now on the stripped fork. Alternatives: Easy!Appointments, Rallly, or Thunderbird scheduling. This is the Nth COSS company to raise on open-source credibility then close source. Plan for it.
DIRECT THE VOICE LIKE A FILM
Google shipped a TTS model that takes 200+ audio direction tags for $1.80/hour
Google DeepMind launched Gemini 3.1 Flash TTS. Write natural language commands inside your text to control voice mid-sentence: [determination], [whispers], [laughs], [slow]. Director’s Notes set accent and personality per character. Multi-speaker in a single API call, no stitching. 70+ languages, 30 prebuilt voices.
The details:
- Pricing: $1.80/hour standard, $0.90/hour batch. The older 2.5 Flash TTS is half the price at $10/1M tokens
- Elo 1,211 on Artificial Analysis TTS leaderboard, ranked second overall
- Audio tags are English-only, even when the text is in another language
- No voice cloning. ElevenLabs still owns that
- No published latency benchmarks for real-time use
Why builders care: Multi-speaker in one call kills the stitching step for audiobooks and agents. Natural language tags replace SSML. Batch at $0.90/hour makes bulk production viable. No cloning, no latency numbers, still in preview.
THE MONOPOLY VERDICT
A jury found Ticketmaster illegally monopolized ticketing after 33 states rejected the DOJ’s settlement
A Manhattan federal jury ruled for 33 states and D.C. on every claim. Live Nation and Ticketmaster illegally monopolized ticketing at major concert venues. The coercion mechanic: refuse Ticketmaster and you lose access to Live Nation artists. Your venue goes dark. Trump’s DOJ tried to settle in March 2026 after a White House meeting with CEO Rapino. 36 states rejected it and fought on.
The details:
- 86% market share at major concert venues (~250 U.S. amphitheaters/arenas with 8,000+ capacity)
- $1.72/ticket overcharge across 22 states, May 2020-2024
- Internal emails: employees called fans “so stupid” and admitted they were “robbing them blind”
- $23.16 billion in 2024 revenue (record). Stock dropped 6.3% after the verdict
Why builders care: If structural remedies follow, ~250 major venue slots become contestable. Startup plays: venue migration tools, fan-side price comparison, artist direct ticketing. TixFox already charges $0.39-$0.99 flat vs. Ticketmaster’s 8-15%+.
TRENDING TODAY
🚨 Tennessee wants to make chatbots a Class A felony - SB 1493 would criminalize training AI that simulates a human or provides emotional support. 15-25 years in prison, plus $150K per plaintiff. Senate Judiciary approved 7-0. Not law yet. 836 upvotes, 488 comments on r/artificial.
🤖 Major drop in intelligence across most major models - Mostly a Claude Code story. A GitHub analysis of 6,852 sessions claimed reasoning depth fell sharply since February 2026. Anthropic says default thinking effort changed to medium. They deny intentional degradation. 664 upvotes, 380 comments on r/LocalLLaMA.
💰 5 years in, we reached $5M ARR, fully bootstrapped - Anonymous founder on r/SaaS. Five years, no outside capital, full ownership. $5M ARR bootstrapped puts you in exit range: 3-6x ($15-30M). 263 upvotes, 103 comments.
DRAMA
$322M AND NOBODY TO COLLECT IT FROM
Anna’s Archive loses $322M Spotify piracy case by default
Anna’s Archive scraped ~86 million music files from Spotify and planned to distribute via BitTorrent. Spotify, UMG, Sony, and Warner sued. The operators never appeared. Judge Rakoff entered a $322M default judgment: $22.2M statutory plus $300M DMCA circumvention ($2,500/file). 363 HN points, 386 comments.
Why builders care: The DMCA circumvention multiplier scales to terrifying numbers. Any scrape of DRM-protected content is a nine-figure liability. Collecting from anonymous operators is another matter, but the precedent stands.
STACK OF THE DAY
🧰 Fakecloud - Free, open-source AWS emulator in Rust. Single 19 MB binary, starts in ~500ms, idles at ~10 MiB RAM. Emulates 22 AWS services (S3, DynamoDB, Lambda, RDS, Cognito, Bedrock). AGPL-3.0. Built because LocalStack went proprietary. Covers services that were always paywalled on LocalStack.
Not sponsored. We just feature tools builders would actually use.
BOOKMARKED TODAY
💾 Do you even need a database? - Most apps are smaller than developers assume. JSONL scanning, hash maps, or sorted files can handle it. SQLite bridges you to 90M DAU on a single server. 219 HN points, 255 comments.
⚖️ No attorney-client privilege for AI chats - Judge Rakoff ruled your conversations with Claude, GPT, or any public AI are discoverable in court. No privilege, no work product protection. If you use AI for legal research, assume it can be subpoenaed. 99 HN points.
📱 YouTube lets users set Shorts time limit to zero - Full kill switch for the Shorts feed. Rolled out globally. Hook quality matters even more when a weak Short trains users to nuke the entire feed. 239 HN points.
Curated by AI, built by a human.