frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Watching Go's new garbage collector move through the heap

https://theconsensus.dev/p/2026/07/19/observing-gos-garbage-collector-old-and-new.html
94•matheusmoreira•2d ago•7 comments

Launch HN: Rise Reforming (YC S26) – Turning Waste Gases into Valuable Chemicals

https://www.rise-reforming.com
16•george_rose25•58m ago•2 comments

Self-contained highly-portable Python distributions

https://gregoryszorc.com/docs/python-build-standalone/main/
52•jcbhmr•2h ago•11 comments

Glue bonds to nonstick surfaces and wipes clean with ethanol

https://cen.acs.org/materials/adhesives/glue-bonds-nonstick-surfaces-wipes-clean/104/web/2026/07
114•gmays•4d ago•55 comments

The computer that helped win World War II

https://spectrum.ieee.org/colossus-computer-ieee-milestone
134•baruchel•5d ago•54 comments

Exploiting Volvo/Eicher's fleet platform to gain control over all users/vehicles

https://eaton-works.com/2026/07/27/my-eicher-hack/
91•EatonZ•5h ago•23 comments

Show HN: FeyNoBg – Automatic background removal model and training library

https://usefeyn.com/blog/feynobg/
55•snyy•3h ago•15 comments

Bytecode-to-Source Mapping

https://tidefield.dev/bytecode-to-source-mapping/
19•evakhoury•2h ago•1 comments

Judge Rejects Google's Attempt to DMCA Its Way Out of Being Scraped

https://www.techdirt.com/2026/07/27/judge-rejects-googles-attempt-to-dmca-its-way-out-of-being-sc...
126•cdrnsf•2h ago•39 comments

Ray tracing massive amounts of animated geometry using tetrahedral cages

https://gpuopen.com/learn/ray-tracing-massive-amounts-animated-geometry/
15•LorenDB•4d ago•2 comments

MAI-Cyber-1-Flash inside MDASH

https://microsoft.ai/news/introducing-mai-cyber-1-flash-inside-mdash/
192•migmartri•4h ago•99 comments

Removing React.js from the codebase and adapting Htmx for UI interactivity (2023)

https://misago-project.org/t/removing-reactjs-from-the-codebase-and-adapting-htmx-for-ui-interact...
192•Ralfp•10h ago•136 comments

Kimi-K3 on HuggingFace

https://huggingface.co/moonshotai/Kimi-K3
1230•nateb2022•14h ago•480 comments

UpCodes (YC S17) is hiring remote AE's to help make buildings cheaper

https://up.codes/careers?utm_source=HN
1•Old_Thrashbarg•3h ago

Paged Out #9 [pdf]

https://pagedout.institute/download/PagedOut_009.pdf
121•laurensr•6h ago•15 comments

Securing Services with Rootless Containers

https://blog.coderspirit.xyz/blog/2026/07/06/securing-services-with-rootless-containers/
7•speckx•4d ago•2 comments

Libsm64: Mario 64 as a library for use in external game engines

https://github.com/libsm64/libsm64
148•klaussilveira•10h ago•18 comments

Show HN: Let's Seal – Let's Encrypt for document signing, free and self-hosted

https://github.com/letsseal/letsseal
34•nsokin•5h ago•18 comments

Professor's invisible prompt trap catches 32/35 students cheating with AI

https://www.techspot.com/news/113243-professor-invisible-prompt-trap-catches-32-students-cheating...
33•leephillips•1h ago•16 comments

How is the Bun Rewrite in Rust going?

https://lockwood.dev/ai/2026/07/27/how-is-the-bun-rewrite-in-rust-going.html
400•tomlockwood•9h ago•301 comments

First Robotic Satellite Servicer Launched

https://www.nrl.navy.mil/Media/News/Article/4551871/robotic-servicing-of-geosynchronous-satellite...
67•GlenTheMachine•4d ago•35 comments

Modern email can be built from borrowed parts

https://en.andros.dev/blog/d7ed8b07/modern-email-can-be-built-from-borrowed-parts/
152•andros•12h ago•79 comments

How real are real numbers? (2004)

https://arxiv.org/abs/math/0411418
26•surprisetalk•5h ago•11 comments

Tokio Gives Progress, Not Ordering: Scheduling 1M Tasks

https://pranitha.dev/posts/tokio-gives-progress-not-ordering/
16•pranitha_m•5h ago•0 comments

VLC for Unity now supported on Linux

https://code.videolan.org/videolan/vlc-unity
130•martz•11h ago•36 comments

Show HN: Infrawrench – A tool to manage cloud and svcs with workflows and chat

https://infrawrench.com
16•astrid__•4h ago•0 comments

Towards a Theory of Bugs: The Ruliology of the Unexpected

https://writings.stephenwolfram.com/2026/07/towards-a-theory-of-bugs-the-ruliology-of-the-unexpec...
55•nsoonhui•3d ago•29 comments

Decathlon Germany adds Wero payment option to decathlon.de website

https://www.sgieurope.com/e-commerce/decathlon-germany-launches-wero-payment-on-its-website/12239...
264•doener•4h ago•178 comments

Should you wash your solar panels?

https://incoherency.co.uk/blog/stories/should-you-wash-your-solar-panels.html
203•surprisetalk•7h ago•191 comments

The Artist Who Colored Ghibli

https://animationobsessive.substack.com/p/the-artist-who-colored-ghibli
50•herbertl•2h ago•1 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."