frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Today's PHP security release, and how we're strengthening security

https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-...
350•ejohnso49•3h ago•165 comments

Canary Tokens

https://canarytokens.org/
26•wiradikusuma•36m ago•3 comments

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
272•abhisek•5h ago•102 comments

The compiler was supposed to end programming too

https://hrih.si/articles/the-compiler-was-supposed-to-end-programming/
61•theanonymousone•1h ago•56 comments

Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds

https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-keys-cracked-in-milliseconds/
705•hkc•10h ago•346 comments

DuckDB 2.0.0 LTS “Cinnamon Teal”

https://duckdb.org/2026/10/21/announcing-duckdb-200
279•nnx•5h ago•29 comments

EA is shutting down BioWare

https://www.theverge.com/games/1015647/ea-is-shutting-down-bioware
215•aaronbrethorst•1h ago•129 comments

Patch the Planet: global response coordination as agents uncover vulnerabilities

https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/
179•nr378•5h ago•110 comments

Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin

https://apnews.com/article/oregon-waterfall-for-sale-lawmakers-996de63462d49ec3ad9bee1629fb9488
120•surprisetalk•4h ago•65 comments

Tiny possum and glider thought extinct for 6000 years found in remote West Papua

https://www.bbc.com/news/articles/cp814l80pw2o
87•bryanrasmussen•1d ago•7 comments

PHP 8.2.35

https://github.com/php/php-src/releases/tag/php-8.2.35
870•tuyuri•5h ago•483 comments

Claude Duet

https://claude.com/product/claude-duet
8•kuberwastaken•7m ago•1 comments

New plastic pollution discovered: 'Plasticorals' coral rubble fused with plastic

https://www.oist.jp/news-center/news/2026/9/18/new-form-plastic-pollution-discovered-shores-vulne...
39•giuliomagnifico•3h ago•13 comments

OpenAI models are coming to Google Cloud

https://openai.com/index/openai-models-google-cloud/
144•armcat•6h ago•54 comments

Anthropic's Public Benefit Charter

https://www.anthropic.com/public-benefit-charter
19•pretext•51m ago•4 comments

The bridge to agent-scale Git infrastructure

https://github.blog/engineering/architecture-optimization/the-bridge-to-agent-scale-git-infrastru...
35•Klaster_1•3h ago•5 comments

Using thousands of AI agents to uncover new leads in biological data

https://openai.com/index/scaling-ai-research-for-complex-biological-data/
97•raahelb•5h ago•46 comments

Drupal is now light-years ahead of its reputation

https://dri.es/state-of-drupal-presentation-september-2026
81•scottfalconer•1d ago•93 comments

Your MCU likely escaped the eMudhra intermediate CA compromise

https://danielmangum.com/posts/mcu-emudhra-intermediate-ca-compromise/
38•hasheddan•3h ago•17 comments

Why Windows 11 still ships with Windows 95's memory manager hidden inside it

https://www.windowslatest.com/2026/10/19/why-windows-11-still-ships-with-windows-95s-memory-manag...
7•khalidkhair•1d ago•1 comments

9 Mothers (YC P26) Is Hiring in Austin, TX

https://9mothers.com/careers
1•ukd1•7h ago

GitLab CVSS 10.0 Integer Overflow issue

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/
3•artooro•20m ago•0 comments

Corporate Linux

https://lpar.ATH0.com/posts/2026/10/corporate-linux/
16•speckx•53m ago•5 comments

Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case

https://www.cnbc.com/2026/10/21/meta-new-mexico-cambridge-analytica-penalty.html
54•cbg0•1h ago•28 comments

Launch HN: Alter (YC S25) – Access control for multi-user agents

https://alterauth.com/
25•simfinii•12h ago•16 comments

Trials and Tribulations of Native Lua Compilation

https://samyeyo.github.io/clx/blog.html
16•_samt_•3d ago•4 comments

C++ futures part 1: The mental model

https://devblogs.microsoft.com/oldnewthing/20261012-00/?p=112767/
53•ibobev•2d ago•11 comments

Way to Play Super Mario 64: On Apple Vision Pro

https://www.pagetable.com/303
173•frizlab•2d ago•67 comments

Show HN: I told people I'm a convicted felon after 20 years of hiding it

https://buford.bg/
19•buf•3h ago•1 comments

Muse exposes users' personal and business secrets when they share conversations

https://arstechnica.com/security/2026/10/meta-muse-exposes-users-personal-and-business-secrets-wh...
367•gumby•18h ago•153 comments
Open in hackernews

Show HN: Zev – Remember (or discover) terminal commands

https://github.com/dtnewman/zev
87•dtnewman•1y ago

Comments

0x696C6961•1y ago
I really like how it gives you multiple options to choose from. I've been using https://github.com/simonw/llm-cmd
dtnewman•1y ago
Thanks! My main issue is that i'm lazy and although i often know approximately what i want i don't want to type a lot of words to describe it exactly. For example writing `zev 'show disk usage'` is somewhat ambiguous. Am i talking about my current folder or the harddrive? My idea was that rather than typing out what I want explicitly, i want to type the minimum amount and then just select the best of available options.
submeta•1y ago
Nice! I use a combination of an endless bash (zsh) history with timestamps that I navigate via fzf and ctr+r and comments I occasionally add to commands via # at the end followed by my annotation so that I can rediscover the command.

I do this ever since I switched to a Mac in 2015 and my history has over 60,000 lines. So that’s basically my knowledge base :)

But your project looks nice. Will check out.

afefers•1y ago
Can you explain how you achieve this?
import•1y ago
Not op but you need fzf and you need to increase the history size of your bash/ssh whatever

https://github.com/junegunn/fzf

WalterGR•1y ago
Shells that use readline (such as bash) may have a history search feature built-in and on by default. Try pressing Ctrl-r or Cmd-r and see if a prompt pops up.

You can build your own workflow by hand by doing something like:

1. Turn on your shell’s feature to record command history.

2. Look into its feature set to control things such as how many entries it remembers, whether it remembers duplicate entries, and whether it timestamps each entry. (Don’t forget to restart each instance of your shell, if needed, for changes to take effect.)

3. Install a tool such as fzf that allows interactive filtering of arbitrary text. (Via Homebrew it’s `brew install fzf`. It’s likely something similar for other package managers.) These tools usually: read lines of input, prompt the user to optionally filter but eventually select a line, then just print that line.

4. Write the necessary shell script(s) / functions / aliases to do things like:

+ invoke the fuzzy-finder on the shell’s history file or a modified version of that file (for example, a modified version that excludes bash’s timestamp lines, or that joins them - perhaps in a human-readable format - with the command it timestamps.)

+ process the output of the fuzzy-finder tool (for example, to copy the command to the clipboard, paste it into the shell, or execute it immediately - which will necessitate things like removing any timestamps or additional notation added in the previous step.)

Step 4 can be easy as something approximating (I’m on mobile right now):

   fzf “$HOME/.bash_history” | copy-to-clipboard
chrisco23•1y ago
I'm trying to get this to work with ollama. I'm on Arch Linux, fish shell, new to ollama, and only very rarely used pipx. I get:

raise ValueError("OPENAI_BASE_URL and OPENAI_API_KEY must be set. Try running `zev --setup`.") ValueError: OPENAI_BASE_URL and OPENAI_API_KEY must be set. Try running `zev --setup`

even when I run (for example) set -x ZEV_USE_OLLAMA 1; zev 'show all files and all permissions'

dtnewman•1y ago
creator here. It pulls env variables from a file in your appstorage directory. I need to change this in a future release to make it cleaner, since I don't think i like it intermingling with env variables.

That said, did you run `zev --setup`?

dtnewman•1y ago
btw, feel free to open an issue on github :)
lionkor•1y ago
Why are you using env variables when you don't pull them primarily from the process env?
dtnewman•1y ago
I’m debating changing it. I do pull in env vars to use as default values (e.g. you already have an API key set). But I might transition way from env variables.
regnull•1y ago
Somewhat related, here's a little project I've done with LLM: https://github.com/regnull/how.sh

It uses locally hosted (or remote) LLMs to create and execute shell commands that you describe. You can go as far as writing "shell scripts" in natural language.

arjie•1y ago
I don't like most of these commands because they just execute. This one is nice because it will be in your history. The current trick I use is to use copilot.vim at the command line. It naturally fits into my flow.

Recently some of my friends reported that it just wants to do comments and I've noticed that it actually biases towards that nowadays, so I start it with something to get it kicked off.

I've been managing to try to figure out what in the prompt makes it like that, but for the moment that little workaround gives me both the comment and the command in my history so it's easier to r-i-search for it.

https://x.com/arjie/status/1575201117595926530

You just set up copilot for neovim normally and set it as your EDITOR. https://wiki.roshangeorge.dev/index.php/AI_Completion_In_The...

wapxmas•1y ago
how do I install it with pip? It requires to be in virtual environment. (
trallnag•1y ago
Use something like pipx or uv
dtnewman•1y ago
it should run outside of a virtual env and is intended to be installed locally. That said, it currently has too many dependencies (IMO) and i'm working on cutting them down to avoid conflicts.
AvieDeckard•1y ago
Your gif in your README features a prompt asking to "show all files in this directory" but the 'ls -lh' returned and selected in the demo gif does not show all files, just the ones that aren't hidden. I'd have chosen a more accurate interaction for the demo.
rco8786•1y ago
Kind of a good example of how AI gets it "almost" right.
imzadi•1y ago
Hi Zev!
latchkey•1y ago
Why not https://docs.atuin.sh/?
dtnewman•1y ago
different use case. atuin is for past commands, whereas this uses an LLM to give you options for commands.
latchkey•1y ago
Feels like this should be an extension to atuin instead of a separate tool.
anamexis•1y ago
Why? Besides both involving terminal commands, they serve very different purposes.
latchkey•1y ago
atuin is a collection of the past, which can be training data for a collection in the future. If I'm asking AI to essentially generate commands, my previous inputs ideally would be part of the basis.
arp242•1y ago
Named after Zev from the film Remember? A few years back I wrote a Vim plugin to remember things with the same name :-)
dtnewman•1y ago
ha, no, just a coincidence. Named after someone i know named Zev. But chose it because it's short and not taken on Pypi
CGamesPlay•1y ago
You may be interested in copying some of the usage patterns from my similar project: https://github.com/CGamesPlay/llm-cmd-comp

Instead of being a separate command, I released a set of key bindings you can push that start the LLM prompt with your current command line, and if you successfully accept the suggestion, replace your command line with the result, bypassing the manual clipboard step, and making it so that the result goes into your shell history as a normal command.

tzury•1y ago
Newman!
badmonster•1y ago
Since it's generating terminal commands dynamically, what safeguards (if any) are in place to avoid generating destructive or insecure commands (like rm -rf /, etc.)?
sathishvj•1y ago
Yes, this is a concern. When I built something similar (gencmd.com), I avoided the auto-run option even though it was easy to implement. imho, it's better to have a human in the loop for these.
dtnewman•1y ago
1) When you are selecting a command you get a little description at the bottom telling you what it does.

2) this doesn’t run anything. It goes to your clipboard and you have to run it yourself

3) this a good callout… what do u think? I’m thinking maybe ask the models to return a Boolean is_dangerous plus a small explanation and then I can display dangerous commands in red and show the warning when you select one.

badmonster•1y ago
sounds like a solid plan
dtnewman•1y ago
Just fyi, this is now implemented
sathishvj•1y ago
Nice! Little plug for what I did too, in a similar vein - it has a web version https://gencmd.com/ and also a cmd line version.
Bishonen88•1y ago
https://docs.aws.amazon.com/codewhisperer/latest/userguide/c...

Looks like cw from aws

porridgeraisin
•
1y ago
Fzf installs hooks automatically for ctrl+r and a bunch of other stuff

Search for `fzf --bash`. Note that the version in the ubuntu repos is too old to have this feature (I think)

reddit_clone•1y ago
Exactly my setup including the #tag's. It is my second brain.

What I love about this is the fzf's fuzzy narrow down. You don't have to start at the beginning of command, you don't have to worry about exact spelling. Just a few snippets you remember, it will narrow it down really fast.

I use the same fuzzy search narrow downs in Emacs.

I miss it everywhere else.

aldanor•1y ago
Fish has built in fuzzy search on ctrl-r as well, with no extra config needed