frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

AMD acquires Taalas to boost inference performance by etching models in silicon

https://www.theregister.com/systems/2026/08/06/amd-acquires-ai-chip-startup-taalas-to-boost-infer...
493•itvision•8h ago•379 comments

Mario Meets Pareto

https://www.mayerowitz.io/blog/mario-meets-pareto
949•theanonymousone•17h ago•151 comments

Scientists discover Kelvin-Helmholtz Instability on the surface of the Sun

https://nso.edu/press-release/nsf-inouye-solar-telescope-enables-major-discovery-of-a-hidden-sola...
185•neversaydie•1d ago•38 comments

Hackers Stalked Me by Hijacking a Smartwatch for Kids

https://www.wired.com/story/hackers-stalked-me-by-hijacking-a-smartwatch-for-kids/
46•worik•5h ago•18 comments

Taste Is All That's Left

https://notashelf.dev/posts/taste-is-all-thats-left
296•tsak•12h ago•226 comments

Bioengineered chewing gum may offer a way to fight HPV and other microbes

https://www.sciencedaily.com/releases/2026/08/260803080917.htm
83•Audiophilip•7h ago•14 comments

Welcoming the Nepalese Government to Have I Been Pwned

https://www.troyhunt.com/welcoming-the-nepalese-government-to-have-i-been-pwned/
115•gnabgib•7h ago•19 comments

Improving GPT‑5.6 Sol in ChatGPT, expanding GPT‑5.6 Luna access for free users

https://openai.com/index/improving-gpt-5-6-sol-in-chatgpt/
191•tedsanders•12h ago•142 comments

GitHub Actions and Pages are experiencing degraded availability

https://www.githubstatus.com/incidents/qcvjkzcs7j74
361•Footkerchief•13h ago•293 comments

Almost no skill required to cook a steak

https://blog.sydorets.com/en/posts/almost-no-skill-required-to-cook-a-steak/
310•yusyd•13h ago•350 comments

Herdr is joining Y Combinator. The runtime stays open

https://herdr.dev/blog/herdr-is-joining-y-combinator/
175•collinmanderson•10h ago•117 comments

Launch HN: ProvenMetal (YC S26) delivers circuit boards in days instead of weeks

https://provenmetal.com
190•willcarkner•13h ago•138 comments

Atomic Clocks

https://www.nist.gov/atomic-clocks/how-do-atomic-clocks-work
5•teleforce•6d ago•0 comments

I stopped trusting USB-C cable labels and started testing them

https://www.makeuseof.com/i-stopped-trusting-usb-c-cable-labels-started-testing-with-meter-instead/
121•baranul•3d ago•97 comments

Retired man plants trees on forgotten land, now it's Sao Paulo's largest park

https://timesofindia.indiatimes.com/world/rest-of-world/in-2003-a-retired-man-planted-trees-on-fo...
62•rmason•5d ago•18 comments

Why Estonians invite strangers into their back gardens each summer

https://www.bbc.com/travel/article/20260731-why-estonians-invite-strangers-into-their-backyards-e...
36•koolhead17•3d ago•6 comments

Meta Ordered to Pay $942M to Address Harm to Kids from Social Media

https://www.wsj.com/tech/meta-ordered-to-pay-942-million-to-address-harm-to-kids-from-social-medi...
136•boplicity•5h ago•78 comments

Humans missed 1 in 3 threats approving AI agent commands across 40k game runs

https://scalex.dev/blog/ai-agent-permissions-stats/
274•Wirbelwind•17h ago•197 comments

STV: A full-motion video codec for the Atari ST

https://medium.com/@jonas.eschenburg/stv-a-video-codec-for-the-atari-st-6e46355c50e4
33•indyjo•1w ago•2 comments

My phone detects going on a run as “someone snatching my phone and running off”

https://mastodon.gamedev.place/@rygorous/117047697255584965
106•luu•10h ago•198 comments

Learn how chips are made with this Rollercoaster Tycoon-inspired animation

https://laurentiugabriel.github.io/ChipTycoon/
123•laurentiurad•6d ago•24 comments

Quake – 30th Anniversary Update

https://slayersclub.bethesda.net/en-US/news/quake-30th-anniversary-update
248•dsubburam•8h ago•121 comments

Show HN: The Channels SDK – Bring Any Agent to Any Channel (Slack, MS Teams)

https://github.com/CopilotKit/channels-sdk
96•davidmckayv•13h ago•20 comments

Can you reverse engineer an ASIC?

https://blog.janestreet.com/can-you-reverse-engineer-an-asic/
76•bschne•10h ago•48 comments

The Sylvester–Gallai Theorem

https://www.futilitycloset.com/2026/07/26/the-sylvester-gallai-theorem/
26•surprisetalk•6d ago•20 comments

Inside vLLM: Anatomy of a High-Throughput LLM Inference System (2025)

https://www.aleksagordic.com/blog/vllm
81•sebg•7h ago•4 comments

The simple elegance of the integrated timing belt loopback fastener

https://danielmangum.com/posts/integrated-timing-belt-loopback-fastener/
108•hasheddan•4d ago•22 comments

Pareto Front

https://en.wikipedia.org/wiki/Pareto_front
231•binyu•1w ago•96 comments

Learning to fly FPV drones with AI flight coach

https://blog.divyendusingh.com/p/learning-to-fly-fpv-drones-with-ai
7•divyenduz•3d ago•5 comments

Building Progressively Enhanced Forms Using htmx

https://www.rafa.ee/articles/progressive-enhanced-forms-htmx/
74•mpweiher•1w ago•11 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."