frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Welcome (back) to Macintosh

https://take.surf/2026/03/01/welcome-back-to-macintosh
112•Udo_Schmitz•1h ago•48 comments

Motorola announces a partnership with GrapheneOS

https://motorolanews.com/motorola-three-new-b2b-solutions-at-mwc-2026/
1973•km•15h ago•707 comments

British Columbia to end time changes, adopt year-round daylight time

https://www.cbc.ca/news/canada/british-columbia/b-c-adopting-year-round-daylight-time-9.7111657
183•ireflect•2h ago•96 comments

First in-utero stem cell therapy for fetal spina bifida repair is safe: study

https://health.ucdavis.edu/news/headlines/first-ever-in-utero-stem-cell-therapy-for-fetal-spina-b...
218•gmays•7h ago•39 comments

New iPad Air, powered by M4

https://www.apple.com/newsroom/2026/03/apple-introduces-the-new-ipad-air-powered-by-m4/
280•Garbage•8h ago•461 comments

Show HN: Govbase – Follow a bill from source text to news bias to social posts

https://govbase.com
126•foxfoxx•5h ago•60 comments

"That Shape Had None" – A Horror of Substrate Independence (Short Fiction)

https://starlightconvenience.net/#that-shape-had-none
60•casmalia•3h ago•12 comments

Show HN: Pianoterm – Run shell commands from your Piano. A Linux CLI tool

https://github.com/vustagc/pianoterm
23•vustagc•1h ago•5 comments

Show HN: uBlock filter list to blur all Instagram Reels

https://gist.github.com/shraiwi/009c652da6ce8c99a6e1e0c86fe66886
71•shraiwi•2h ago•17 comments

The 185-Microsecond Type Hint

https://blog.sturdystatistics.com/posts/type_hint/
7•kianN•31m ago•1 comments

LFortran compiles fpm

https://lfortran.org/blog/2026/02/lfortran-compiles-fpm/
31•wtlin•2d ago•8 comments

Launch HN: OctaPulse (YC W26) – Robotics and computer vision for fish farming

52•rohxnsxngh•5h ago•27 comments

Ask HN: Who is hiring? (March 2026)

138•whoishiring•6h ago•187 comments

Ask HN: Who wants to be hired? (March 2026)

49•whoishiring•6h ago•136 comments

Show HN: I built a sub-500ms latency voice agent from scratch

https://www.ntik.me/posts/voice-agent
15•nicktikhonov•1h ago•6 comments

How to talk to anyone and why you should

https://www.theguardian.com/lifeandstyle/2026/feb/24/stranger-secret-how-to-talk-to-anyone-why-yo...
513•Looky1173•15h ago•494 comments

Reflex (YC W23) Is Hiring Software Engineers – Python

https://www.ycombinator.com/companies/reflex/jobs
1•apetuskey•5h ago

iPhone 17e

https://www.apple.com/newsroom/2026/03/apple-introduces-iphone-17e/
148•meetpateltech•8h ago•140 comments

Inside the M4 Apple Neural Engine, Part 1: Reverse Engineering

https://maderix.substack.com/p/inside-the-m4-apple-neural-engine
226•zdw•1d ago•57 comments

Programmable Cryptography

https://0xparc.org/writings/programmable-cryptography-1
14•fi-le•1d ago•1 comments

Boss-CSS: I created another "CSS-in-JS" lib

https://dev.to/wintercounter/boss-css-i-created-another-css-in-js-lib-and-here-is-why-23kc
14•wintercounter•2h ago•1 comments

Build your own Command Line with ANSI escape codes (2016)

https://www.lihaoyi.com/post/BuildyourownCommandLinewithANSIescapecodes.html
26•vinhnx•2d ago•8 comments

Packaging a Gleam app into a single executable

https://www.dhzdhd.dev/blog/gleam-executable
72•todsacerdoti•6h ago•6 comments

Parallel coding agents with tmux and Markdown specs

https://schipper.ai/posts/parallel-coding-agents/
95•schipperai•8h ago•73 comments

Use the Mikado Method to do safe changes in a complex codebase

https://understandlegacycode.com/blog/a-process-to-do-safe-changes-in-a-complex-codebase/
135•foenix•4d ago•65 comments

A case for Go as the best language for AI agents

https://getbruin.com/blog/go-is-the-best-language-for-agents/
123•karakanb•3h ago•193 comments

Why Objective-C

https://inessential.com/2026/02/27/why-objective-c.html
109•ingve•2d ago•97 comments

Zclaw – The 888 KiB Assistant

https://zclaw.dev
69•kristianpaul•2d ago•35 comments

19th century silent film that first captured a robot attack

https://www.npr.org/2026/02/28/nx-s1-5730373/georges-melies-robot-film-1897-library-of-congress-g...
32•ynac•7h ago•10 comments

Microsoft bans the word "Microslop" on its Discord, then locks the server

https://www.windowslatest.com/2026/03/02/microsoft-gets-tired-of-microslop-bans-the-word-on-its-d...
980•robtherobber•12h ago•437 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•9mo ago

Comments

steele•9mo ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•9mo ago
Lmao, gentrify cracked me up
neilv•9mo ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•9mo ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•9mo ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•9mo ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•9mo ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•9mo ago
May as well just release an executable tbh.
theamk•9mo ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•9mo ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•9mo ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."