frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

The Other Half of AI Safety

https://personalaisafety.com/p/the-other-half-of-ai-safety
35•sofiaqt•1h ago•27 comments

Linux gaming is faster because Windows APIs are becoming Linux kernel features

https://www.xda-developers.com/linux-gaming-is-getting-faster-because-windows-apis-are-becoming-l...
518•haunter•3d ago•343 comments

Setting up a free *.city.state.us locality domain (2025)

https://fredchan.org/blog/locality-domains-guide/
486•speckx•10h ago•154 comments

Scorched Earth 2000 is back

http://www.scorch2000.com/web/
13•meshko•57m ago•8 comments

A History of IDEs at Google

https://laurent.le-brun.eu/blog/a-history-of-ides-at-google
268•laurentlb•4d ago•195 comments

Marco Polo: Finding a friend with only distance and motion

https://www.jackhogan.me/blog/marco-polo
35•jackhogan11•2d ago•4 comments

Chess puzzle I found in my dad's old book

https://ardoedo.it/kempelen/
80•Eswo•2d ago•27 comments

The Emacsification of Software

https://sockpuppet.org/blog/2026/05/12/emacsification/
191•rdslw•18h ago•128 comments

Princeton mandates proctoring for in-person exams, upending 133 year precedent

https://www.dailyprincetonian.com/article/2026/05/princeton-news-adpol-proctoring-in-person-exami...
243•bookofjoe•5h ago•348 comments

Xs of Y – roguelike that names itself every run. Written in 4kLoC

https://github.com/nooga/xsofy
158•andsoitis•3d ago•69 comments

Twin brothers wipe 96 government databases minutes after being fired

https://arstechnica.com/tech-policy/2026/05/drop-database-what-not-to-do-after-losing-an-it-job/
299•jnord•1d ago•225 comments

Launch HN: Ardent (YC P26) – Postgres sandboxes in seconds with zero migration

https://www.tryardent.com/
64•vc289•8h ago•28 comments

The US is winning the AI race where it matters most: commercialization

https://avkcode.github.io/blog/us-winning-ai-race.html
162•akrylov•11h ago•462 comments

S-100 Virtual Workbench

https://grantmestrength.github.io/S100/
98•rbanffy•9h ago•20 comments

Reverting the incremental GC in Python 3.14 and 3.15

https://discuss.python.org/t/reverting-the-incremental-gc-in-python-3-14-and-3-15/107014
197•curiousgal•4d ago•78 comments

The Age of the Amplifier

https://www.construction-physics.com/p/the-age-of-the-amplifier
4•surprisetalk•1d ago•0 comments

After 3 decades of splendid scientific communication, this one's for you, Ned

https://www.adn.com/alaska-news/science/2026/05/08/after-3-decades-of-splendid-scientific-communi...
12•rolph•3d ago•0 comments

A sentimental tour of late 1990s and early 2000s hacking tools

https://andreafortuna.org/2026/05/13/amarcord/
44•speckx•7h ago•16 comments

Tell HN: Dont use Claude Design, lost access to my projects after unsubscribing

157•pycassa•3h ago•58 comments

Show HN: Needle: We Distilled Gemini Tool Calling into a 26M Model

https://github.com/cactus-compute/needle
638•HenryNdubuaku•1d ago•183 comments

An idiot's guide to lead optimisation for proteins

https://magnusross.github.io/posts/protein-lead-optimisation-1/
140•magni121•2d ago•16 comments

Meta won't let you block its AI account on Threads

https://www.theverge.com/tech/929091/meta-ai-threads-account-block
107•logickkk1•5h ago•43 comments

Leaving GitHub for Forgejo

https://jorijn.com/en/blog/leaving-github-for-forgejo/
526•jorijn•12h ago•281 comments

Preserving Fisher-Price Pixter

https://dmitry.gr/?r=05.Projects&proj=37.%20Pixter
207•dmitrygr•2d ago•44 comments

I moved my digital stack to Europe

https://monokai.com/articles/how-i-moved-my-digital-stack-to-europe/
884•monokai_nl•13h ago•537 comments

Making the news available at no cost is a victory

https://www.sltrib.com/opinion/commentary/2026/05/12/just-days-tribune-reporting/
108•danso•6h ago•112 comments

Comparing a 1980s memory map to the Raspi Pico

https://medium.com/@noborutakahashi/a-40-year-old-memory-map-comparable-to-todays-raspberry-pi-pi...
21•Schlagbohrer•3d ago•0 comments

Medicare's new payment model is built for AI. Most of the tech world has no idea

https://techcrunch.com/2026/05/12/medicares-new-payment-model-is-built-for-ai-and-most-of-the-tec...
52•brandonb•4h ago•30 comments

Substrate (YC S24) Is Hiring a Technical Success Manager

https://www.ycombinator.com/companies/substrate/jobs/T2fMBhD-technical-success-manager
1•kunle•13h ago

Mystery Microsoft bug leaker keeps the zero-days coming

https://www.theregister.com/security/2026/05/13/disgruntled-researcher-releases-two-more-microsof...
7•e12e•44m ago•0 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•12mo ago

Comments

steele•11mo ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•11mo ago
Lmao, gentrify cracked me up
neilv•11mo ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•11mo ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•11mo ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•11mo ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•11mo ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•11mo ago
May as well just release an executable tbh.
theamk•11mo ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•11mo ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•11mo ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."