frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Cloudflare acquires Deno

https://deno.com/blog/cloudflare
1011•ilreb•10h ago•523 comments

Triple-A Minesweeper

https://minesweeper.mikelacher.com/
514•robin_reala•7h ago•101 comments

Show HN: Carrier-Explode: iPhone, Pixel and Galaxy carrier settings decoded

https://carrierexplode.com/
180•simplyalec•5h ago•16 comments

Our $445M Series D

https://oxide.computer/blog/our-445m-series-d
559•ahlCVA•10h ago•247 comments

YouTuber Says Cops Visited Him After He Built a Flock-Style Camera to Track Cops

https://gizmodo.com/youtuber-says-cops-paid-him-a-visit-after-he-built-flock-style-camera-to-trac...
329•gumby•2h ago•172 comments

Sorry, I'm in a meeting

https://iminafleeting.com/
721•splintersio•14h ago•225 comments

Pointing AI at archives found a forgotten meteorite, lost rhinos, and more

https://jessewaites.com/blog/post/i-pointed-ai-at-400-years-of-archives/
93•piratebroadcast•12h ago•45 comments

Typesafe AI raises $870M at $7.5B

https://typesafe.ai/blog/series-ai
229•tosh•6h ago•197 comments

Japan's Most Famous Tuna Buyer Says He Turned Somali Pirates into Fishermen

https://www.japaninsides.com/the-sushi-king-who-went-to-somalia-how-japans-most-famous-tuna-buyer...
19•robaato•1h ago•5 comments

Show HN: Let your AI agents paint big arrows, boxes and text on your screen

https://github.com/franzenzenhofer/big-arrow-on-the-screen
362•franze•12h ago•161 comments

Show HN: Proton Drive for Linux

https://oss.lsantos.dev/proton-drive-linux-fs/
23•khaosdoctor•1d ago•6 comments

Nobel Peace Prize for 2026 to Navanethem Pillay

https://www.nobelprize.org/prizes/peace/2026/press-release/
426•Anon84•13h ago•217 comments

No Man Is an Island

https://borretti.me/article/no-man-is-an-island
245•zetalyrae•3h ago•140 comments

'Wallace and Gromit,' 90% Alone

https://animationobsessive.substack.com/p/wallace-and-gromit-90-alone
141•vinhnx•9h ago•19 comments

Show HN: The rarest tech books and docs you've probably never read

https://readrare.com/
54•miletus•6h ago•9 comments

M7.6 Earthquake in Panama

https://earthquake.usgs.gov/earthquakes/eventpage/us6000u18k/executive
116•gslin•5h ago•33 comments

Microsoft-Decision-1, our model for fast decision-making

https://commandline.microsoft.com/microsoft-decision-1-model-foundry/
121•lisajaloza•5h ago•47 comments

Ideas aren't getting harder to find (2022)

https://www.experimental-history.com/p/ideas-arent-getting-harder-to-find
111•rafaelc•5h ago•49 comments

A statement on the Tor Project's relationship with Mullvad

https://blog.torproject.org/on-tor-relationship-with-mullvad/
101•runtimewire•7h ago•230 comments

OpenAI mistranslated mathematics into code for its Navier-Stokes proof

https://www.newscientist.com/article/2592824-openai-mistranslated-mathematics-into-code-for-its-n...
24•danielmorozoff•2h ago•2 comments

Germany transforms former coal mines into Europe's largest lake landscape

https://www.euronews.com/2026/04/14/almost-like-lake-como-germany-transforms-former-coal-mines-in...
173•ohjeez•8h ago•95 comments

Training Text-to-Image Models Without a VAE

https://www.linum.ai/field-notes/pyramid-jit
45•schopra909•3d ago•14 comments

Keyboard differences between Windows and Macs

https://unsung.aresluna.org/deeper-dive-keyboard-differences-between-windows-and-macs/
319•sohkamyung•20h ago•257 comments

Programming Isn't Special

https://blog.glyph.im/2026/10/programming-isnt-special.html
163•ingve•15h ago•182 comments

How to Fix autoconf-style Configuration Probing

https://build2.org/blog/fix-autoconf.xhtml
5•boris•1d ago•1 comments

MXC - a sandboxed code execution system

https://github.com/microsoft/mxc
177•nreece•17h ago•79 comments

OpenAI fires three safety researchers for "mishandling research information"

https://techcrunch.com/2026/10/08/fired-openai-safety-researchers-dispute-misconduct-claims-warn-...
304•trakkstar•13h ago•200 comments

What mathematicians should know about the Lean Theorem Prover: reliability & AI

https://terrytao.wordpress.com/2026/10/09/what-mathematicians-should-know-about-the-lean-theorem-...
16•matt_d•6h ago•1 comments

You might want to try being less creative

https://blog.bawolf.com/p/you-might-want-to-try-being-less
61•bryantwolf•5h ago•30 comments

Theranos.world

https://www.theranos.world/
547•kbyatnal•1d ago•199 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."