frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

The Future of CSS

https://www.joshwcomeau.com/css/interop-2027/
173•soheilpro•4h ago•57 comments

Show HN: SimCity, but with Permits

https://permit.petercai.com/
688•pcai•11h ago•352 comments

In Hilbert space, all things are quantumly possible

https://www.quantamagazine.org/in-hilbert-space-all-things-are-quantumly-possible-20260826/
58•unprovable•4h ago•26 comments

Feds suspect ransom negotiator ran ShinyHunters extortion site

https://krebsonsecurity.com/2026/10/feds-suspect-ransom-negotiator-ran-shinyhunters-extortion-site/
159•Bender•7h ago•65 comments

Voxtral 3

https://mistral.ai/news/voxtral-3/
588•ilreb•14h ago•149 comments

Battlezone Online: BZFlag in the Browser

https://github.com/timriker/bzo
8•indigodaddy•59m ago•3 comments

Four Years with Decker

https://beyondloom.com/blog/fouryearsdecker.html
14•ibobev•17h ago•0 comments

The Other Epidemic: Trying to get off benzodiazepines

https://www.thebeliever.net/the-other-epidemic/
146•gaplong•7h ago•96 comments

eMudhra intermediate CA compromise

https://emudhra.we-have-a-problem.com/
797•galadran•16h ago•368 comments

Borrow Checking Zero-Cost Cyclic Mutability

https://antelang.org/blog/safe_cyclic_mutability/
21•jfecher•1d ago•1 comments

Muse exposes users' personal and business secrets when they share conversations

https://arstechnica.com/security/2026/10/meta-muse-exposes-users-personal-and-business-secrets-wh...
65•gumby•5h ago•12 comments

Pillowfort Is Closing

https://www.pillowfort.social/posts/8413273
16•BrenBarn•59m ago•4 comments

Good type against all odds

https://unsung.aresluna.org/good-type-against-all-odds/
73•firloop•4h ago•8 comments

ZX Spectrum Next Laptop

https://www.dorchester3d.com/printing/blog/2020/11/zx-spectrum-next-laptop-version-2
32•utopcell•2d ago•4 comments

PHP session.upload_progress heap UAF (CVE-2026-109618 / -109619)

https://jackalsyn.com/posts/php-up-2026.html
114•rfarley04•1h ago•32 comments

Google open-sources TorchTPU, a native PyTorch back end for TPUs

https://github.com/google-pytorch/torch_tpu
309•ilreb•13h ago•68 comments

SlopCodeBench 10/2026 – Opus 5.5, Astra wins overall, xhigh considered harmful

https://github.com/humanlayer/advanced-context-engineering-for-coding-agents/blob/main/benchmarki...
231•dhorthy•5d ago•88 comments

What shall I teach my son?

https://stevekrouse.com/ends
340•Curiositry•12h ago•405 comments

Ship Your Interpreter

https://www.basis.ai/blog/ship-your-interpreters/
4•gopiandcode•1d ago•0 comments

Setting Up SSH Keys on macOS with Touch ID

https://nmattia.com/posts/2026-10-19-setting-up-ssh-keys-touch-id/
11•civilchaos•2h ago•6 comments

Apple broke an essential presentation feature of iPads

https://teddysvoronos.com/2026-10-19-apple-broke-an-essential-presentation-feature-of-ipads/
534•evanb•17h ago•267 comments

DeepInfer: High-performance inference framework for DeepSeek models

https://github.com/deepseek-ai/DeepInfer
2200•ggcr•20h ago•849 comments

Alibaba hikes DeepSeek V4 Flash 0731 output prices by 230%

https://www.stork.ai/newsletter/2026-10-20-alibaba-quietly-tripled-deepseek-prices#lead
5•GloVin•47m ago•2 comments

Ofcom concedes defeat in 4chan case

https://prestonbyrne.com/2026/10/20/ofcom-concedes-defeat/
367•iamnothere•15h ago•272 comments

Nexus-CLI – Pure Go Bridge to DeepSeek R1/V3 with Claude Code and Ollama Support

https://github.com/xamrayev/nexus-cli
7•xamrayev•1h ago•1 comments

Sixteen years after Deepwater Horizon, deep sea life shows few signs of recovery

https://e360.yale.edu/digest/deepwater-horizon-deep-sea-recovery
240•speckx•14h ago•144 comments

Tsrs: A Port of TypeScript to Rust

https://blog.cloudflare.com/typescript-rust-port/
383•hnisjafx40•16h ago•184 comments

Upcoming critical PHP security release

https://news-web.php.net/php.announce/509
419•xd•9h ago•154 comments

To Make, or to Buy: The Economics of Decision Models

https://pncnmnp.github.io/blogs/economics-decision-models.html
28•pncnmnp•2d ago•1 comments

Google Cloud outage affects almost all banking and other operations in Europe

https://www.neowin.net/news/google-cloud-outage-takes-down-hsbc-revolut-bank-of-scotland-llyods-e...
374•paweladamczuk•19h ago•186 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."