frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Embedded Rust or C Firmware? Lessons from an Industrial Microcontroller Use Case

https://arxiv.org/abs/2604.25679
44•mrtz•2d ago•15 comments

Show HN: Apple's Sharp Running in the Browser via ONNX Runtime Web

https://github.com/bring-shrubbery/ml-sharp-web
81•bring-shrubbery•5h ago•10 comments

Group averages obscure how an individual's brain controls behavior: study

https://med.stanford.edu/news/all-news/2026/04/brain-scans-individual-versus-group.html
57•hhs•2d ago•8 comments

A couple million lines of Haskell: Production engineering at Mercury

https://blog.haskell.org/a-couple-million-lines-of-haskell/
311•unignorant•14h ago•143 comments

All Four Sentinel-1 Satellites Are Now Live

https://orbitaltoday.com/2026/05/03/all-four-sentinel-1-satellites-are-now-live-and-europes-earth...
14•cgeier•2h ago•5 comments

This Month in Ladybird – April 2026

https://ladybird.org/newsletter/2026-04-30/
413•richardboegli•17h ago•106 comments

Utilyze measures how efficiently your GPU is doing useful work

https://github.com/systalyze/utilyze
25•nateb2022•2d ago•3 comments

Six Years Perfecting Maps on WatchOS

https://www.david-smith.org/blog/2026/04/29/maps-on-watchos/
373•valzevul•17h ago•87 comments

Dav2d

https://code.videolan.org/videolan/dav2d
538•dabinat•20h ago•150 comments

Windows quality update: Progress we've made since March

https://blogs.windows.com/windows-insider/2026/05/01/windows-quality-update-progress-weve-made-si...
94•jovial_cavalier•1d ago•266 comments

Do_not_track

https://donottrack.sh/
409•RubyGuy•20h ago•126 comments

Neanderthals ran 'fat factories' 125,000 years ago (2025)

https://www.universiteitleiden.nl/en/news/2025/07/neanderthals-ran-fat-factories-125000-years-ago
236•andsoitis•17h ago•122 comments

Unverified Evaluations in Dusk's PLONK

https://osec.io/blog/2026-04-30-unverified-evaluations-dusk-plonk/
28•deut-erium•2d ago•4 comments

Care homes and hotels in Japan shut as expansion strategy unravels

https://www.newsonjapan.com/article/149075.php
70•mikhael•12h ago•22 comments

Specsmaxxing – On overcoming AI psychosis, and why I write specs in YAML

https://acai.sh/blog/specsmaxxing
180•brendanmc6•7h ago•206 comments

Inventions for battery reuse and recycling increase seven-fold in last decade

https://www.epo.org/en/news-events/news/inventions-battery-reuse-and-recycling-increase-more-seve...
212•JeanKage•3d ago•23 comments

VS Code inserting 'Co-Authored-by Copilot' into commits regardless of usage

https://github.com/microsoft/vscode/pull/310226
1326•indrora•18h ago•705 comments

Systemd-manager-TUI: A TUI application for managing systemd services

https://github.com/Matheus-git/systemd-manager-tui
42•thunderbong•3h ago•13 comments

The agent harness belongs outside the sandbox

https://www.mendral.com/blog/agent-harness-belongs-outside-sandbox
123•shad42•16h ago•90 comments

Investors pile into clean energy as Iran war drives push for energy security

https://www.ft.com/content/9921f2b5-c910-4cec-a50f-cad453935a1a
83•JumpCrisscross•4h ago•86 comments

Clojurists Together – Q2 2026 Open Source Funding Announcement

https://www.clojuriststogether.org/news/q2-2026-funding-announcement/
119•dragandj•16h ago•14 comments

A more efficient implementation of Shor's algorithm

https://lwn.net/Articles/1066156/
96•signa11•2d ago•25 comments

Benchmarking a Bug Scanner

https://blog.detail.dev/posts/bug-scanner/
9•drob•2d ago•5 comments

How fast is a macOS VM, and how small could it be?

https://eclecticlight.co/2026/05/02/how-fast-is-a-macos-vm-and-how-small-could-it-be/
255•moosia•1d ago•96 comments

Because it doesn't have to

https://blog.computationalcomplexity.org/2026/04/because-it-doesnt-have-to.html
64•zdw•3d ago•13 comments

A physics engine with incremental rollback for multiplayer games

https://easel.games/blog/2026-rollback-physics
103•BSTRhino•1d ago•37 comments

Show HN: State of the Art of Coding Models, According to Hacker News Commenters

https://hnup.date/hn-sota
129•yunusabd•16h ago•74 comments

AI, Intimacy, and the Data You Never Meant to Share

https://fshot.org/techzone/the-algorithm-knows.php
52•victorkulla•11h ago•2 comments

Maryland to ban A.I.-driven price increases in grocery stores

https://www.nytimes.com/2026/05/01/business/surveillance-pricing-groceries-maryland.html
197•doener•12h ago•173 comments

DeepSeek V4 – almost on the frontier

https://simonwillison.net/2026/Apr/24/deepseek-v4/
571•indigodaddy•1d ago•345 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•11mo ago

Comments

steele•11mo ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•11mo ago
Lmao, gentrify cracked me up
neilv•11mo ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•11mo ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•11mo ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•11mo ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•11mo ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•11mo ago
May as well just release an executable tbh.
theamk•11mo ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•11mo ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•11mo ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."