frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

For the first time ever, Google Search is less than 50% of Alphabet's revenue

https://www.kadoa.com/companies/insights/google-search-below-half
192•hubraumhugo•1h ago•127 comments

We're releasing the weights of Mistral Large 4

https://mistral.ai/news/mistral-large-4-oss/
700•kuberwastaken•3h ago•184 comments

Tomáš Mikolov awarded the Medal of Merit by the President of the Czech Republic

https://www.vut.cz/en/but/news-f19528/two-but-graduates-received-state-honors-from-the-president-...
47•armcat•1h ago•3 comments

H.264 Is Magic (2016)

https://sidbala.com/h-264-is-magic/
126•ea016•2h ago•56 comments

Zombie stats: Where the numbers AI quotes come from

https://trakkr.ai/trakkr-research/zombie-stats
82•mektrik•2h ago•43 comments

LLM Voice

https://martinfowler.com/bliki/LLM-Voice.html
80•ibobev•2h ago•41 comments

DoorDash to acquire Instacart

https://about.doordash.com/en-us/news/doordash-to-acquire-instacart
245•WalterSobchak•5h ago•435 comments

Grace Blackwell needs a new scheduler: 27% more usable GPUs from the same racks

https://skypilot.ai/blog/grace-blackwell-needs-a-new-scheduler
56•wondersky•2h ago•5 comments

Toxic Experts (2017)

https://nedbatchelder.com/blog/201711/toxic_experts
27•luu•1h ago•16 comments

Chained PHP2Shell Exploit Roots 25 Servers, Including US Government Servers

https://dreamgroup.com/blog/chained-php2shell-exploit-roots-25-servers
176•882542F3884314B•7h ago•82 comments

noalloc: Tooling and libraries to enforce zero heap allocations in Golang

https://github.com/theconsensuslabs/noalloc
30•g0xA52A2A•23h ago•3 comments

If IPv4 were land

https://iptrust.co/blog/if-ipv4-were-land
153•rokostik•5h ago•163 comments

What we know so far about Spain train crash

https://www.bbc.com/news/articles/cm8xz7pkd0jjo
55•ZeljkoS•9h ago•106 comments

Launch HN: Simantic (YC F26) – Firmware Simulation for AI Agents

16•shong0504•2h ago•9 comments

Mexico is a showroom for electric vehicles you can't buy in the U.S.

https://www.washingtonpost.com/climate-environment/2026/10/27/i-saw-future-driving-mexico-its-off...
168•bookofjoe•2h ago•151 comments

NetBSD adds a new text editor called atto

https://mastodon.sdf.org/@netbsd/117518160563539748
111•luke8086•5h ago•97 comments

How Google determines the names for bodies of water in Google Earth (2008)

https://publicpolicy.googleblog.com/2008/04/how-google-determines-names-for-bodies.html
183•terminalbraid•6h ago•150 comments

Keplearn: Extract Equations from Data in Seconds

https://github.com/owls-on-wires/keplearn
45•owls-on-wires•3h ago•1 comments

StackOverflow now gets fewer than 1000 questions a month

https://data.stackexchange.com/stackoverflow/query/1926661#graph?t=1
723•babelfish•18h ago•632 comments

Qwenputer: A functioning, deterministic RISC-V CPU inside Qwen3.5

https://divagr.com/blog/qwenputer
664•csmantle•17h ago•139 comments

Blanets and Weird Worlds

https://www.antipope.org/charlie/blog-static/2026/10/bizarre-blanets-and-other-weir.html
5•pavel_lishin•2d ago•0 comments

Java's new AOT cache feature is in a rough state

https://xpipe.io/blog/java-aot-cache
71•theanonymousone•3d ago•21 comments

16colo.rs – ANSI/ASCII art archive

https://16colo.rs/
18•memalign•1h ago•0 comments

If-then-else had to be invented (2020)

https://github.com/e-n-f/if-then-else/blob/master/if-then-else.md
123•theanonymousone•4d ago•141 comments

We won't "just hang out"

https://borretti.me/article/we-wont-just-hang-out
72•barry-cotter•11h ago•126 comments

The first wired XR glasses powered by Android XR

https://blog.google/products-and-platforms/platforms/android/xreal-aura/
74•yincrash•18h ago•60 comments

Why is this fingerprinting script creating bioweapons?

https://nullpt.rs/fingerprinting-bioweapons
1506•hazebooth•1d ago•284 comments

Zero click, silent, remote Android DoS

https://smsofdeath.com/
279•MarkBlah•10h ago•159 comments

Everything Rhymes with Porcelain

https://worksinprogress.co/issue/everything-rhymes-with-porcelain/
10•cromulent•2d ago•1 comments

‘You Are Done’: The letter sent to King by the F.B.I (2014)

https://www.nytimes.com/2014/11/16/magazine/what-an-uncensored-letter-to-mlk-reveals.html
378•surprisetalk•4h ago•290 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."