惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Google DeepMind News
Google DeepMind News
Security Latest
Security Latest
T
The Exploit Database - CXSecurity.com
Jina AI
Jina AI
IT之家
IT之家
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
月光博客
月光博客
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
罗磊的独立博客
C
Cyber Attacks, Cyber Crime and Cyber Security
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
爱范儿
爱范儿
Cisco Talos Blog
Cisco Talos Blog
V
V2EX
C
CERT Recently Published Vulnerability Notes
Microsoft Azure Blog
Microsoft Azure Blog
Hugging Face - Blog
Hugging Face - Blog
S
Schneier on Security
The Register - Security
The Register - Security
L
Lohrmann on Cybersecurity
博客园 - 聂微东
有赞技术团队
有赞技术团队
Know Your Adversary
Know Your Adversary
V2EX - 技术
V2EX - 技术
大猫的无限游戏
大猫的无限游戏
Project Zero
Project Zero
Simon Willison's Weblog
Simon Willison's Weblog
Last Week in AI
Last Week in AI
博客园 - Franky
D
Docker
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
H
Hacker News: Front Page
MongoDB | Blog
MongoDB | Blog
W
WeLiveSecurity
Vercel News
Vercel News
C
Check Point Blog
N
News | PayPal Newsroom
A
Arctic Wolf
T
Threat Research - Cisco Blogs
F
Full Disclosure
博客园 - 司徒正美
GbyAI
GbyAI
A
About on SuperTechFans
Webroot Blog
Webroot Blog
K
KPMG report finds enterprise disconnect between AI and its ROI | CIO
I
InfoQ
Martin Fowler
Martin Fowler
Y
Y Combinator Blog
Latest news
Latest news
Help Net Security
Help Net Security

Hacker News

Introducing Claude Opus 4.7 Qwen Studio The Future of Everything is Lies, I Guess: Where Do We Go From Here? GitHub - SeanFDZ/macmind: Single-layer transformer in HyperTalk for the classic Macintosh Show HN: Agent-cache – Multi-tier LLM/tool/session caching for Valkey and Redis Bonsai 1-bit WebGPU - a Hugging Face Space by webml-community Moving a large-scale metrics pipeline from StatsD to OpenTelemetry / Prometheus GitHub - Nightmare-Eclipse/RedSun: The Red Sun vulnerability repository GitHub - SethPyle376/hiraeth: Local AWS emulator focused on fast integration testing, with SQS support, SQLite-backed state, and a debug-friendly web UI. GitHub - macOS26/Agent: Any AI, replaces Claude Code, Cursor, OpenClaw. Over 18 LLM providers (Claude, OpenAI, Gemini, Ollama, Zai, HF, Qwen) wired into a native Mac app that writes code, builds Xcode projects, bumps versions, manages git, automates Safari, use AppleScript, JS or Accessibility, extend Agent! w/ MCP Servers, run tasks from your iPhone via Messages. YouTube now lets you turn off Shorts I Made a Terminal Pager Burgers | マクドナルド公式 Commands — HackerNews CLI documentation ChatGPT for Excel PiCore - Raspberry Pi Port of Tiny Core Linux Live Nation illegally monopolized ticketing market, jury finds Google Broke Its Promise to Me. Now ICE Has My Data. Founding Engineer at Adaptional | Y Combinator CRISPR takes important step toward silencing Down syndrome’s extra chromosome GitHub - saffron-health/libretto: The AI toolkit for building reliable browser automations US v. Heppner (S.D.N.Y. 2026) no attorney-client privilege for AI chats [pdf] Retrofitting JIT Compilers into C Interpreters IPv6 – Google The Accursèd Alphabetical Clock Cybersecurity Looks Like Proof of Work Now Fragments: April 14 Cal.com Goes Closed Source: Why AI Security Is Forcing Our Decision | Cal.com - Scheduling Software for Online Bookings Laravel raised money and now injects ads directly into your agent When moving fast, talking is the first thing to break Too much Discussion of the XOR swap trick – Heather Cafe Introduction to Spherical Harmonics for Graphics Programmers The Grand Line Building a Z-Machine in the worst possible language High-Level Rust: Getting 80% of the Benefits with 20% of the Pain GitHub - duguyue100/midnight-captain: Inspired by Midnight Commander, tailored to my taste. How to build a `git diff` driver · Jamie Tanna | Software Engineer Center for Responsible, Decentralized Intelligence at Berkeley The Local Universe’s Expansion Rate Is Clearer Than Ever, but Still Doesn’t Add Up - A new synthesis of astronomical measurements confirms a persistent mismatch that could point to physics beyond current models The air throughout our homes is infused with microplastics. But there are things you can do to breathe less of them The disturbing white paper Red Hat is trying to erase from the internet – OSnews The Future of Everything is Lies, I Guess: Annoyances ‘Abhorrent’: the inside story of the Polymarket gamblers betting millions on war Productive procrastination — Max van IJsselmuiden maps, territory and LMs 447 Terabytes per Square Centimetre at Zero Retention Energy: Non-Volatile Memory at the Atomic Scale on Fluorographane Show HN: Pardonned.com – A searchable database of US Pardons 20 Years on AWS and Never Not My Job The Seasons are Wrong Artemis II crew splashes down near San Diego after historic moon mission We gave an AI a 3 year retail lease in SF and asked it to make a profit | Andon Labs How a dancer with ALS used brainwaves to perform live On filing the corners off my MacBooks Installing every* Firefox extension OpenClaw’s memory is unreliable, and you don’t know when it will break Steve Blank Nowhere Is Safe Chimpanzees in Uganda locked in vicious 'civil war', say researchers watgo - a WebAssembly Toolkit for Go linux/Documentation/process/coding-assistants.rst at master · torvalds/linux GitHub - callumlocke/json-formatter: Makes JSON easy to read. Founding Product Engineer at Bild AI | Y Combinator A compelling title that is cryptic enough to get you to take action on it GitHub - Keychron/Keychron-Keyboards-Hardware-Design: Industrial design files for Keychron keyboards and mice. 100+ models with CAD assets in STEP, DXF, DWG, and PDF. Source-available, with commercial use allowed for original compatible accessories within the license terms. [ANNOUNCE] WireGuardNT v0.11 and WireGuard for Windows v0.6 Released 1D-Chess Helium Is Hard to Replace Cooperative Vectors Introduction | Evolve Keeping a Postgres queue healthy — PlanetScale Our response to the Axios developer tool compromise Do Americans read print books, e-books or audiobooks more? The Zettelkasten Method in Obsidian: A Practical Setup Guide Artemis II Is Competency Porn and We Are Starving For It WeakC4 Flight Viz — Cockpit View A Mexican surveillance giant you’ve never heard of is now watching the U.S. border Surelock: Deadlock-Free Mutexes for Rust RISC-V 101 – what is it and what does it mean for Canonical? | Ubuntu The Problem That Built an Industry How Much Linear Memory Access Is Enough? | Solidean Investigating Split Locks on x86-64 Simplest hash functions Sybilproof reputation mechanisms (2005) [pdf] What is a property? How Complex is my Code? Static code analysis in Kotlin — tools overview Toffoli gates are all you need PGLite evangelism dcmake: a new CMake debugger UI Clojure on Fennel part one: Persistent Data Structures Fragments: April 2 Python Release Python install manager 26.1 The Life and Death of the Book Review - Liberties Introducing Database Traffic Control — PlanetScale Bitcoin miners are losing $19,000 on every BTC produced as difficulty drops 7.8% God sleeps in the minerals Building slogbox Apple Silicon and Virtual Machines: Beating the 2 VM Limit Who was “Not Even Wrong” first? Pokemon Evolution Vs Darwinian Evolution The APL Programming Language Source Code
The Self-Cancelling Subscription
surprisetalk · 2026-05-07 · via Hacker News

Happy April 1st! This post is part of April Cools Club: an April 1st effort to publish genuine essays on unexpected topics. Please enjoy this true story, and rest assured that the tech content will be back soon!

One Friday night a few months ago, my family and I sat down to relax and enjoy a TV show on our streaming platform of choice. The subscription was a perk of one of our credit cards, and we had been satisfied customers for several months.

This time was different. Instead of a "Continue watching" button, we saw "Start your free trial."

Our streaming subscription had been deactivated. [Sidenote: I'm intentionally not naming companies here. Systems are hard, and systems across organizational boundaries are even harder. This essay will do more good in the world in an educational capacity than in a "name names thereby throwing engineers under a bus" capacity.]

A living room ready for a cozy night in, watching a favorite TV show while under a warm blanket on the couch. The TV is (metaphorically) happy to play along for now — but an incoming access-denied message is moments away from changing that!

Easy to fix, surely?

Not a big deal, I thought. The credit card info must have gotten desynchronized.

The streaming service requires a credit card on file. Our card there had recently expired and been replaced. Sometimes vendors are either lenient toward this, or are able to update the card automatically — but perhaps not this time?

I used another device to log in and updated the credit card on file. Then I was surprised by service asking to charge my card for the subscription instead of applying the credit card perk. [Sidenote: The perk was from one credit card, while the card on file was a different card. Did this play a part in the confusion? Who knows!]

Time for the good old "turn it off then turn it back on again" method! I logged into the bank's website and toggled the streaming subscription perk back and forth. [Sidenote: Separately, I also updated the card on file with the streaming provider to the new, valid card.] Easy enough!

Everything worked ... for about 5 minutes 🤨

We barely got past the "in the last episode" recap, when the playback got paused and the dreaded "Start your free trial." message re-appeared.

I barely got out a "What the..." when my phone flashed a notification: a new email with the subject line "Your Subscription Expired."

Huh. Weird.

Surely a glitch, right? I had just set up the subscription, how could it possibly have expired?

When in doubt, turn it off and turn it back on yet again.

Another 5 minutes of streaming TV later — same thing! The show stopped cold, and I had yet another email claiming my subscription expired.

"No issues on our end"

With our thrilling TV show replaced by a thrilling debugging session, I was becoming profoundly grumpy.

I don't particularly enjoy talking on the phone. I enjoy calling support even less. But my grumpiness gave me energy to pick up the phone and call the credit card support line.

"No issues on our end," they said! Everything looked in order. There was a valid activation of the streaming perk, and a confirmation from the provider. "Must be on the other end, please give them a call" they said.

You'll never guess what the other side's support team said. Jinx! "No issues on our end!" The subscription had been activated, then cancelled in an orderly fashion about 5 minutes later.

What the...

Support ping-pong and debugging steps for someone else

I got ping-ponged between the credit card's and the streaming provider's support lines.

They escalated me to higher tiers of support staff. I patiently waited on hold, then dutifully repeated the whole story to each new support agent.

Each party claimed, insisted, swore up and down that the problem isn't on their end. Everything was in order! Surely the issue was on the other side?

Or just maybe, had I shared my credentials with someone else who might have unsubscribed? Maybe if I tried on a different device? Or updated the streaming app? Cleared the cache?

Those are valid debugging steps. There's a good reason they are in the support script! I'm sure they are the answer to many people's situation. But not here!

It was a Friday night, and I was spending a large chunk of it on the phone with support.

I just wanted to watch a TV show with my family.

Black-box debugging to fall asleep

By this point, it had gotten pretty late in the evening — too late to start watching the show, even if somehow everything magically started to work.

But you know that nagging feeling when a problem bothers you enough that you can't fall asleep?

Yeah. I couldn't sleep. My mind was churning away!

Then it hit me ⚡

I logged into the bank website, unlinked it from the streaming account, and called it a night. I slept like a baby! [Sidenote: I'm pretty sure whoever came up with this phrase never had kids of their own... Anyway, you know what I mean.]

The next morning, I re-linked the accounts to set up the streaming subscription again.

I held my metaphorical breath for 5 minutes ... 10 minutes ... 15 minutes. No cancellation email!

Success 🎉

What (probably) happened

Obviously, I can't prove what really happened.

But I have some prior experience with cursed systems problems. Regular readers may remember I previously solved the case of the Wi-Fi that only worked while it was raining. I also figured out why Safari was blocking some pages only from the second time you visited.

I solved this problem by thinking about it, making a prediction, and testing it. It worked out, so I feel pretty good about my theory!

Brief recap of the facts before we dive in:

  • Re-linking the subscription always worked immediately.
  • The failure mode was delayed and repeatable: about 5 minutes after activation, playback stopped and an expiration email arrived.
  • Support on both sides saw an orderly activation followed by an orderly cancellation, with no errors.
  • When I unlinked the accounts, waited overnight, and only then re-linked them, the cancellation never came back.

Does anything jump out at you? It sure feels like "set up the subscription" and "tear down the subscription" were not happening with the same timing guarantees, doesn't it?

As a one-liner: "creation was synchronous, unlinking was async." A race condition!

A sync-vs-async race condition

From my perspective, I unlinked the accounts first and re-linked them second. The bank systems observed the same! But the streaming provider observed them in the opposite order: as if linking the accounts happened first, followed by unlinking a few minutes later.

Linking the accounts between the bank and the streaming provider is a synchronous process, [Sidenote: At least mostly — the user-observable part is sync, but there's likely additional async work behind the scenes.] for both technical and user experience reasons. For example, it makes sense to get the user access as quickly as possible! "Click here and you're done" feels good, "click here and we'll send you an email in a few minutes" does not. To make that happen:

  • The bank website produces a special link to the streaming provider's site. The link is tagged with a unique code corresponding to the user's complementary subscription.
  • The streaming provider applies that special subscription to the logged-in account, offering the user to log in if they haven't already.
  • The link is established and the user can start watching things!
  • Meanwhile, any remaining work can be done asynchronously, such as the streaming site reporting to the bank that the subscription has been activated etc. The user doesn't need to observe this — they are happily watching something instead!

De-linking accounts is async, again for both technical and user experience reasons. A partially-sync, partially-async workflow is harder to build than one firmly on one side or the other. Here, purely-async makes more sense than purely-sync:

  • From a user experience perspective, the user has no need to wait around until the link is severed. They expressed the intent to sever the link, and were told this would be accomplished. Generally, that's sufficient.
  • From a technical perspective, async workflows can recover more gracefully in case a component of the system is currently experiencing an outage — especially if the component is across an API boundary or owned by another company. Instead of a user being frustrated by an error message, the system can simply buffer the user's command then execute it after the outage is resolved.

How waiting fixed the problem

Async workflows usually have higher latency than sync ones. The resilience of async workloads usually requires more heavyweight steps, like durably persisting data on disks.

In the case of unlinking accounts, there's also no business-imposed pressure to optimize the latency. As long as it works, it's fine — 5 minutes and 5 seconds are qualitatively the same here. Usually, at least!

Putting it all together, then:

  1. I unlinked the accounts on the bank website.
    • This immediately flipped a flag in my profile, updating the UI to let me re-link if I wanted to.
    • It also kicked off an async workflow to notify the streaming service that the subscription is discontinued.
  2. I then linked the accounts again.
    • This synchronously took me to the streaming provider, where I completed the subscription setup.
    • I then was able to start playing my TV show. Meanwhile...
  3. The bank and streaming site were still asynchronously processing the unlinking event.
    • A few minutes later, that process was complete — deactivating my account and sending me an email confirmation of the requested cancellation. The cancellation email was due to my act of unlinking the accounts, even though it happened in the wrong order and despite me having re-linked the accounts.

Which leaves one more mystery...

Why did the account get deactivated originally?

The streaming provider has a policy of requiring a valid credit card, even for complementary memberships via a credit card perk.

Recall that my family and I had already been watching shows there for a few months. All this trouble started right around when the credit card we had on file expired!

The most likely sequence of events [Sidenote: In which I have substantially less confidence than the other part...] rhymes with the following.

Our TV app noticed that our account was no longer in good standing — it had an expired card on file. This is against policy, so it needed to be rectified before proceeding.

Typing in a new credit card into a TV using an on-screen keyboard is not a choice most security team would endorse. Instead, the app logged us out as a means to encourage logging in on another device. A login on another device would show a prompt to update the credit card on file, and the common flow for TV app logins is to log into another device first, then enter a code or scan a QR code to cross-authenticate. Either way, the credit card gets updated.

However, the act of entering a new credit card appears to have erroneously triggered the "make a payment" flow, instead of applying the subscription perk. The perk info may have been unlinked as a result of entering the card. The fact that the card on file was not the same card providing the subscription perk may have been a contributing factor.

Systems are hard

The real world is complex, so good systems are difficult to build!

I tell this story not to throw builders under the metaphorical bus, but with a profound sense of child-like amazement at the fact that cases like this are the exception, not the rule.

If I flick on a light switch, the lights turn on — yet I don't need to know where those electrons came from nor how they got here. Amazing!!

Only when things don't work do we usually notice the systems at hand. Complaining about an outage means the default case is that things just work!

"Working" is not the natural state in a complex world! It's a testament to the combined energy and skill of many people that systems are built and kept working well enough for long enough so as to become invisible.

A system quietly becoming invisible should be celebrated. That's why this essay exists.

To the builders 💖

If you liked this essay, consider subscribing to my blog or following me on Mastodon, Bluesky, or Twitter/X.

Discuss on lobste.rs.