frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Molly(Signal fork) has not been updated since 3 months and is vulnerable

https://piefed.world/post/1503394
143•DeepLogin•4h ago•89 comments

We Took over ChatGPT Accounts

https://www.parameter.ai/labs/we-found-a-gap-at-openai
151•armcat•4h ago•68 comments

Switch Lowering in GCC

https://xoranth.net/gcc-switch/
125•signa11•7h ago•23 comments

Simple circuits can create complex behaviors

https://aatishb.com/myriad/lets-build-a-brain/
52•aatish•3d ago•4 comments

Serbia just elected the world's brainiest parliament

https://www.science.org/content/article/serbia-just-elected-world-s-brainiest-parliament
531•input_sh•5h ago•316 comments

Digital minimalism

https://vitalik.eth.limo/general/2026/10/31/digital_minimalism.html
149•wilbertliu•9h ago•119 comments

Prospero: A new coding harness for a more civilized age

https://nullprogram.com/blog/2026/10/31/
78•fovc•3h ago•52 comments

Retired professor arrested for blocking delivery robot. Will do it again

https://www.cnn.com/2026/10/31/us/philadelphia-woman-delivery-robots-cec
48•dxs•1h ago•21 comments

Show HN: Marelleo, an open-source story box I built for my kids using ESP32

https://zebra.rodeo/en/blog/marelleo/
129•foOg•3d ago•37 comments

AI, Lean, and the Future of Formal Verification, with Lean Creator Leo de Moura

https://thedataexchange.media/leo-de-moura-lean-aws/
111•datascientist•1d ago•25 comments

The $6.3B Binance hack was pulled off in just 20 minutes

https://www.wired.com/story/the-dollar63-billion-binance-hack-was-pulled-off-in-just-20-minutes/
525•domhudson•1d ago•366 comments

My favourite PowerMac is a Nintendo Wii

https://virtuallyfun.com/2026/10/29/my-favourite-powermac-is-a-nintendo-wii/
343•DHowett•21h ago•104 comments

Hunting 'Zombie Accounts' in Active Directory

https://www.fabian.fyi/2026/10/zombie-hunt.html
11•optimiz•1d ago•1 comments

Cloudflare Turnstile solver library (no headless browser required)

https://github.com/chris124567/cfsolve
266•costco•2d ago•89 comments

Northflank Breached

https://status.northflank.com
460•js4ever•1d ago•335 comments

Ex-Meta Researcher Torrented Pirated Books, Deleted It 'Due to Litigation'

https://torrentfreak.com/ex-meta-researcher-torrented-pirated-books-dataset-deleted-it-due-to-all...
8•WesleyGrant782•25m ago•0 comments

Breaking the open web won't stop the bad bots

https://www.techpolicy.press/breaking-the-open-web-wont-stop-the-bad-bots/
296•raybb•3d ago•128 comments

Tell HN: Scribd Breached

287•x______________•12h ago•105 comments

Florilegium: Procedural Flowers in LaTeX

https://github.com/kevinraymond/florilegium
338•nanna•23h ago•50 comments

The oldest ice disappears and the Stone Age emerges from it

https://www.sciencenorway.no/archaeology-climate-culture/the-oldest-ice-is-disappearing-the-stone...
178•dxs•19h ago•78 comments

Cisco gives engineer unlimited AI tokens to rewrite legacy code

https://fortune.com/2026/10/30/cisco-president-jeetu-patel-gen-z-27-year-old-unlimited-ai-tokens-...
241•taubek•1d ago•287 comments

Backdoor in Claude Code for VS Code extension on the Cursor Marketplace

https://phorion.io/blog/offical-claude-code-vsx-compromise/
934•_chall•1d ago•537 comments

Show HN: A working Nintendo in ~1GB of Qwen weights

https://github.com/dbreunig/nesformer
273•dbreunig•22h ago•135 comments

Longitudinal Changes InWearable-Captured PhysiologyBefore Sudden Cardiac Death

https://www.jacc.org/doi/epdf/10.1016/j.jaccas.2026.110397
52•brandonb•3d ago•24 comments

Keeping the Bonfires Lit

https://www.historytoday.com/archive/out-margins/keeping-bonfires-lit
13•Petiver•1d ago•5 comments

The federated code forge

https://tangled.org/blog/forge/
309•zlliang•23h ago•90 comments

Azure's Weakest Link – Five Full Cross-Tenant Compromises

https://www.binarysecurity.no/posts/2026/10/one-root-case
325•swq115•1d ago•59 comments

Show HN: To Honor Sir Patrick Stewart, Enjoy the TNG Episode Guessing Game

https://tng.episodle.com/
217•francisofascii•15h ago•68 comments

Jules Verne's Lost Novel

https://blue-continuum.com/verne-paris
134•dnetesn•19h ago•32 comments

Trapped in the Technologist Factory

https://ideolalia.com/essays/trapped-in-the-technologist-factory.html
58•luu•2d ago•20 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."