frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Dolly Parton's Imagination Library

https://imaginationlibrary.com/
274•jumploops•4h ago•50 comments

What goes into making an animated film?

https://www.disneyanimation.com/process/
47•embedding-shape•2h ago•17 comments

Overgrown, when plants invade your abandoned tabs

https://charliegerard.dev/blog/overgrown-extension/
54•speckx•3d ago•13 comments

Why I Am a Programmer

https://www.alfie.wtf/programming/why-i-am-a-programmer.html
78•jruohonen•3h ago•14 comments

The State of Context Engineering

https://www.dbreunig.com/2026/10/24/the-state-of-context-engineering.html
26•pchristensen•2h ago•3 comments

A 10-year-old CNN outperforms frontier LLMs for skin cancer diagnosis

https://lynchlab.net/llm-skin-cancer
346•sungam•5h ago•177 comments

I refuse to accept a censored Internet. Join Me at FOSDEM 27

https://talkweb.eu/openweb/4558/
327•Tomte•5h ago•168 comments

Oregon Police Are Charging a Local News Outlet $2.5M for Records About One Cop

https://theintercept.com/2026/10/01/oregon-police-misconduct-public-records-cost-fee/
309•tdeck•4h ago•78 comments

The U.S. Power Grid

https://nomagicpill.site/knowledge/powergrid.html
48•surprisetalk•3d ago•17 comments

Gheist campaign plants secret-dumping workflows using stolen GitHub tokens

https://www.wiz.io/blog/gheist-attempted-scaled-abuse-of-stolen-github-tokens-stumbles
39•acossta•3h ago•0 comments

Serbia's Vucic concedes election defeat in historic win for student movement

https://www.reuters.com/world/europe/serbia-votes-students-seek-unseat-vucic-snap-election-2026-1...
101•consumer451•1h ago•41 comments

Where the Romans Fought (interactive map)

https://iosiflazaridis.github.io/battles-of-the-romans/
23•endorphine•3h ago•8 comments

We should be more ambitious with the software we build

https://danluu.com/ambitious/
730•ltratt•1d ago•671 comments

Show HN: Hurston-1 open source TTS that speak Southern American and Afro-English

https://huggingface.co/destined/hurston-1
33•Gcarter08•21h ago•10 comments

VCF Southwest 2026, but Edited on Silicon Graphics for '90s TV [video]

https://www.youtube.com/watch?v=46wxttvq9qY
50•zdw•1d ago•11 comments

UTS #39: Unicode Security Mechanisms

https://unicode.org/reports/tr39/
28•robin_reala•6h ago•5 comments

Active incident at Dreamhost forcing password reset

https://www.dreamhoststatus.com/
94•greenchair•9h ago•35 comments

JetBrains Thinkrail

https://github.com/JetBrains/thinkrail
143•hmokiguess•6h ago•101 comments

Making the Buddha Head from Merv Whole Again

https://www.getty.edu/news/buddha-head-of-merv-turkmenistan-conservation/
4•laybak•2d ago•0 comments

AI use leads UC Berkeley math professor to see 'no point' in grading homework

https://www.dailycal.org/news/campus/academics/ai-use-leads-uc-berkeley-math-professor-to-see-no-...
172•romanhn•6h ago•254 comments

Recreate the Apollo Guidance Computer

https://www.raspberrypi.com/news/recreate-the-apollo-guidance-computer/
34•Brajeshwar•3d ago•2 comments

Focused Company Operating Principles

https://focused.io/operating-principles
8•mooreds•2h ago•0 comments

Cerebras Deploys Trillion-Parameter AI Models

https://www.cerebras.ai/blog/how-we-deploy-trillion-parameter-frontier-models-on-cerebras
344•gmays•21h ago•127 comments

Root shell on Samsung TV

https://twitter.com/log4j/status/2113014142600953868?s=46
733•testing22321•1d ago•557 comments

Eunice is almost here

https://armincat.com/articles/eunice-is-almost-here
49•armcat•3h ago•42 comments

Moderna and Merck say their mRNA cancer vaccine cut death, recurrence by 42%

https://arstechnica.com/health/2026/10/personalized-mrna-cancer-vaccine-cut-melanoma-death-recurr...
133•_Microft•3h ago•25 comments

All you need is Wide Events, not "Metrics, Logs and Traces"

https://isburmistrov.substack.com/p/all-you-need-is-wide-events-not-metrics
75•bootlegbilly•4h ago•24 comments

The Goose Programming Language

https://aardappel.github.io/goose/
559•bobbydigitales•1d ago•345 comments

How Japanese Dried Bonito Is Made

https://kottke.org/26/10/how-japanese-dried-bonito-is-made
182•bookofjoe•3d ago•50 comments

Crosscut – Drawing Dynamic Models

https://www.inkandswitch.com/crosscut/
3•andsoitis•2h ago•0 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."