frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Ten days later, Git on macOS still trusts the compromised eMudhra certificates

https://emudhra.we-have-a-problem.com/apple.html
634•galadran•4h ago•236 comments

CNC Stone Carving

https://carmelitegothic.com/cnc-stone-carving/
104•bschne•1h ago•16 comments

Start Doing Graph Theory

https://vertex.degree/
334•ibobev•5d ago•76 comments

Kentucky man becomes the first humanist granted religious exemption from AI

https://religionnews.com/2026/10/26/in-a-first-a-humanist-granted-a-religious-exemption-from-usin...
182•danso•2h ago•197 comments

Unveiling The Grid: PCBs made in America, twice as fast as Shenzhen

https://www.circuithub.com/post/unveiling-the-grid
173•seddona•2d ago•80 comments

ICE Is Running One of the Largest Anti-Left Surveillance Ops in US History

https://www.wired.com/story/ice-is-running-one-of-the-largest-anti-left-surveillance-operations-i...
747•zzzeek•3h ago•524 comments

An architectural comparison of Obsidian Canvas and Heptabase

https://www.fluxlinks.com/blog/obsidian-canvas-vs-heptabase
24•ezrasu•1h ago•8 comments

Emacs Turns 50

https://www.technologyreview.com/2026/10/20/1145399/emacs-turns-50/
149•internet_points•2h ago•60 comments

AlpineBSD

https://wiki.alpinebsd.org
29•bradley_taunt•1h ago•29 comments

Git for the US Code

https://lexifina.com/blog/git-for-the-us-code
372•alansaber•14h ago•190 comments

Gaussian Splats part 3: There's always a bigger scene

https://www.magnopus.com/blog/gaussiansplats-part-3-theres-always-a-bigger-scene
20•ibobev•5d ago•3 comments

Ghostty 1.4

https://ghostty.org/docs/install/release-notes/1-4-0
1213•deaux•23h ago•387 comments

Genie 4

https://deepmind.google/blog/genie-4-a-new-generation-of-world-simulation/
987•acossta•23h ago•562 comments

From confession to conspiracy: How the Wedgewood fake polls story spread

https://www.cip.uw.edu/2026/10/23/from-confession-to-conspiracy-how-the-wedgewood-fake-polls-stor...
9•croes•3d ago•1 comments

Amazon rainforest cut down to build highway for COP climate summit (2025)

https://www.bbc.com/news/articles/c9vy191rgn1o
17•bilsbie•36m ago•1 comments

Ink droplets in motion snag top prize in Nikon Small World contest

https://arstechnica.com/science/2026/10/meet-the-2026-winner-of-nikons-small-world-photomicrograp...
331•_Microft•2d ago•60 comments

Amazon to buy satellite firm Globalstar in $11.57B deal

https://www.reuters.com/business/media-telecom/amazon-signs-1157-billion-deal-satellite-firm-glob...
146•noptd•4h ago•68 comments

26,400 live credentials found scanning 7.25M repos on China's Gitee

https://www.mongodb.com/company/blog/technical/scanning-7-point-25-million-public-repositories-ch...
9•kernelrocks•29m ago•1 comments

Survival LLM: AI assistant and emergency library that runs on your own computer

https://www.brangus.io/survival-llm
456•Luc•20h ago•170 comments

Decompiling Fast Food Tycoon 2: Drawing the World

https://healeycodes.com/decompiling-fast-food-tycoon-2-drawing-the-world
131•healeycodes•3d ago•27 comments

Tesla Semi catches fire on I-880

https://electrek.co/2026/10/28/tesla-semi-fire-i-880-hayward-no-crash/
28•metadat•1h ago•16 comments

Tailscale SSH: Investigation and remediation update

https://tailscale.com/ssh-investigation-update
336•figmert•20h ago•176 comments

Early progress on accelerating drug development with Claude

https://www.anthropic.com/research/early-progress-drug-development
284•dataking•19h ago•275 comments

MacOS Extensions Pack for the Apple Network Server v1.0

http://oldvcr.blogspot.com/2026/10/macos-extensions-pack-for-apple-network.html
98•classichasclass•3d ago•2 comments

About the compromised eMudhra intermediate CAs

https://support.apple.com/en-us/149555
101•birdculture•4h ago•49 comments

Code-execution flaw in UEFI firmware threatens most servers on planet Earth

https://arstechnica.com/security/2026/10/code-execution-flaw-in-uefi-firmware-threatens-most-serv...
232•DamnInteresting•19h ago•149 comments

New 14‑inch MacBook Pro with M6

https://www.apple.com/in/newsroom/2026/10/apple-introduces-the-new-14-inch-macbook-pro-with-m6/
404•beex•23h ago•561 comments

The Colors of a Soap Film

https://aseemrb.me/blog/colors-of-a-soap-film/
32•gregsadetsky•4d ago•2 comments

SS United States to be sunk as largest artificial reef

https://divemagazine.com/scuba-diving-news/ss-united-states-to-be-sunk-as-worlds-largest-artifici...
190•geox•2d ago•155 comments

New iMac with M6

https://www.apple.com/imac/
364•notfried•1d ago•465 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."