frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

HackerTube: YouTube built from videos recommended by HN

https://karpathy.bearblog.dev/hacker-tube/
877•karpathy•7h ago•277 comments

An Italian farmer found some unknown seeds in his attic and planted them

https://www.smithsonianmag.com/science-nature/italian-farmer-found-unknown-seeds-attic-with-nothi...
224•ecares•5h ago•64 comments

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
388•oger•8h ago•181 comments

Memdoor: A team of 5 Qwen3.8-27B models beats Fable 5 on LiveCodeBench Hard

https://github.com/guregodevo/memdoor/tree/main/examples/workflows/team-solve
120•guregodevo•5h ago•63 comments

Altoids Project

https://uvdn7.github.io/altoids-project/
68•uvdn7•5h ago•4 comments

Brazilian Court Sanctions Lawyers for Prompt Injection in Court Filing

https://jetstream.security/insights/brazilian-court-sanctions-prompt-injection-filing/
10•doodlesdev•1h ago•4 comments

When electric cars were for women

https://spectrum.ieee.org/early-electric-vehicles
48•dverlaeckt80•4h ago•28 comments

It's the memory latency, stupid

https://pivotlake.io/blog/its-the-memory-latency-stupid/
153•ntur1337•9h ago•43 comments

Zinc creep in cable spelter sockets brought down the Arecibo telescope in 2020

https://maketecheasier.com/arecibo-zinc-creep-collapse/
50•ohjeez•1d ago•13 comments

Jepsen: ParticleDB 1.1.4

https://jepsen.io/analyses/particledb-1.1.4
218•aphyr•14h ago•121 comments

Show HN: NES Contra (1987) port (ASM –> C and then C –> WebAssembly)

https://epoyraz.github.io/nes-contra-us/
66•tevlon•8h ago•39 comments

Edgar Allan Poe, Quintessential American Writer

https://slate.com/culture/2026/10/edgar-allan-poe-poems-stories-most-influential-american-writer-...
13•samclemens•2d ago•0 comments

Surviving "The Graduate"

https://www.newyorker.com/culture/the-weekend-essay/dustin-hoffman-on-surviving-the-graduate
74•samizdis•7h ago•22 comments

Constructing a Quine from Kleene's Second Recursion Theorem

https://emarzion.github.io/KSRT/
12•mkckto•3h ago•1 comments

The Duty of a Scholar

https://www.daemonology.net/blog/2026-10-31-The-Duty-of-a-Scholar.html
97•gslin•8h ago•29 comments

Do the math: How we took over ChatGPT accounts

https://www.parameter.ai/labs/we-found-a-gap-at-openai
311•armcat•17h ago•153 comments

AI text watermarking and quality loss

https://blog.keyvan.net/p/ai-text-watermarking-and-quality
31•danielfoster•6h ago•6 comments

Show HN: BBRouter – Ben Eater's 8-bit computer, simulated on 3D breadboards

https://bbrouter.com/bbrouter/ben-eater-sap-1
11•creack•3h ago•4 comments

Simple circuits can create complex behaviors

https://aatishb.com/myriad/lets-build-a-brain/
223•aatish•4d ago•69 comments

Decode kernel panic from QR Code photo

https://gist.github.com/skorotkiewicz/c59e591c26661cb52b06afc42d8ac546
11•modinfo•1d ago•3 comments

Much Ado About None: Sentinel Values in Python

https://florianwilhelm.info/2026/10/sentinel_values/
57•sebg•2d ago•38 comments

Electrification Could Cut Global Energy Use in Half

https://fullycharged.show/podcasts/podcast-361-why-electrification-could-cut-global-energy-use-in...
46•toomuchtodo•8h ago•7 comments

Sculpture re-creates odd optical effects of famed Lycurgus Cup

https://arstechnica.com/science/2026/10/scientists-recreate-the-1600-year-old-recipe-of-lycurgus-...
26•dverlaeckt80•1d ago•2 comments

Anthropic blocks users for anything touching training larger models

https://twitter.com/jiahaoshao1/status/2116475922190922088
244•pretext•8h ago•131 comments

A 1580 Map Shows Why Data Visualization Is Never Neutral

https://thereader.mitpress.mit.edu/a-1580-map-shows-why-data-visualization-is-never-neutral/
6•the-mitr•1d ago•0 comments

Leaking Secrets from Air-Gap Computers by Spelling Radio Signals from RAM

https://arxiv.org/abs/2409.02292
3•hapax_legomena•2h ago•0 comments

Show HN: A language model that lives in a boot sector

https://github.com/kerlenton/bootgpt
63•kerlenton•14h ago•1 comments

Reading and writing are less symmetric than you (probably) think

https://fgiesen.wordpress.com/2015/10/25/reading-and-writing-are-less-symmetric-than-you-probably...
88•luu•3d ago•23 comments

William Nordhaus has died

https://news.yale.edu/2026/10/31/william-nordhaus-nobel-laureate-who-integrated-economics-and-cli...
63•ilreb•9h ago•21 comments

Hermantown approves controversial Google Data Center during late night meeting

https://www.mprnews.org/story/2026/10/31/hermantown-approves-controversial-google-data-center-dur...
16•tech-pulse•1h ago•6 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."