frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

C++26 Disapproved

https://andreasfertig.com/blog/2026/11/cpp26-dis-failed-how-does-cpp-survive/
108•thatxliner•3h ago•38 comments

Distinct cellular and genetic differences in colorectal cancer in young patients

https://www.dana-farber.org/newsroom/news-releases/2026/study-reveals-distinct-cellular-and-genet...
18•gmays•1h ago•0 comments

The Internals of PostgreSQL

https://www.interdb.jp/pg/index.html
178•ibobev•6h ago•11 comments

Jailbreaking my car's navigation system just so I can change the time

https://blog.nns.ee/2026/11/02/renault-hack/
675•xx_ns•1d ago•281 comments

Stringman, an $800 open-source room scale gripper robot

https://neufangled.com/
454•nharada•11h ago•159 comments

Giant canyon on Mars is still tectonically active

https://lamont.columbia.edu/news/giant-canyon-mars-still-tectonically-active-today
35•gmays•2h ago•1 comments

Show HN: HackerTV – HN's most-recommended Youtube videos as 24/7 TV channels

https://hackertv.org
237•dsalzman•1d ago•49 comments

Arrows to arrows, categories to queries (2025)

https://reasonablypolymorphic.com/blog/arrows-to-arrows/
9•firstbase•1h ago•0 comments

Japan's Jimi 'Mundane' Halloween Costumes of 2026

https://spoon-tamago.com/japan-jimi-mundane-halloween-costumes-2026/
141•zdw•1d ago•23 comments

Safari introduces Adaptive Dark Mode in 27.3

https://webkit.org/blog/18541/introducing-adaptive-dark-mode/
343•paddingtone•6h ago•197 comments

Fujifilm to boost tape production 5x as AI fuels archiving demand

https://arstechnica.com/gadgets/2026/10/fujifilm-to-boost-tape-production-5x-as-ai-fuels-archivin...
411•bookofjoe•1d ago•175 comments

Qwen 3.8 27B on my laptop can interpret model weights, too

https://simonwillison.net/2026/Nov/3/qwen-can-interpret-model-weights/
529•theanonymousone•10h ago•166 comments

Why Clip Art Was Everywhere Until It Wasn't [video]

https://www.youtube.com/watch?v=XfLlpxE6AYM
14•surprisetalk•15h ago•2 comments

Postman silently auto-installs AI plugins and attempts to share all API data

https://github.com/postmanlabs/postman-app-support/issues/14370
1111•sidgarimella•11h ago•363 comments

The Little Book of Generative AI Foundations: An Intuitive Mathematical Primer

https://arxiv.org/abs/2605.29713
270•ibobev•6h ago•47 comments

We're training a Figma-fluent editing model

https://www.figma.com/blog/training-a-figma-fluent-editing-model/
88•gmays•3d ago•40 comments

There is no posttraining data commons

https://openathena.ai/blog/there-is-no-posttraining-data-commons/
44•lukasschwab•13h ago•10 comments

Show HN: Kairos – Open-source risk and fraud decisioning platform

https://github.com/finic-ai/kairos
73•ayanb9440•7h ago•12 comments

How I use AI (Oct 2026)

https://ben.stolovitz.com/posts/how-use-ai-oct-2026/
108•citelao•10h ago•98 comments

The Pnyx and the Agora (2016)

https://www.readingdesign.org/the-pnyx-and-the-agora
5•apophatic•7h ago•0 comments

Introduction to Programming in ATS

https://ats-lang.sourceforge.net/DOCUMENT/INT2PROGINATS/HTML/book1.html
61•ibobev•8h ago•9 comments

Microsoft fixes a Windows 11 annoyance as PC revenue declines

https://arstechnica.com/gadgets/2026/10/windows-11-gets-right-click-menu-improvements-as-pc-reven...
27•rbanffy•15h ago•77 comments

Curiosity Traps

https://www.autodidacts.io/curiosity-traps/
57•surprisetalk•1d ago•6 comments

Union Types and Option Types (2025)

https://tibleiz.net/blog/2025-03-16-union-types-and-option-types.html
32•g0xA52A2A•1d ago•13 comments

The 'Astra can read and write weights to improve Qwen' post is misleading

https://honnibal.dev/blog/astra-read-write-misleading
931•syllogism•16h ago•195 comments

Writing seen in PHerc. 306B, for the first time in 2000 years

https://scrollprize.substack.com/p/writing-seen-in-pherc-306b-for-the
121•benbreen•1d ago•16 comments

Antimony: CAD Software Evolved from Lisp Machines and Not Drafting Tables (2015)

https://www.mattkeeter.com/projects/antimony/3/
113•pmkary•1d ago•62 comments

Ashby (YC W19) Is Hiring EMs

https://www.ashbyhq.com/careers?ashby_jid=695b1ce6-c375-4fad-94ef-61b50a3fbd28&utm_source=hn
1•abhikp•11h ago

Mac at any scale

https://namespace.so/blog/mac-at-any-scale
336•anner_•13h ago•195 comments

Pratt parsing is a black box

https://vinipsmaker.github.io/blog/article/pratt-parsing-is-a-black-box/
48•ibobev•8h ago•21 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."