frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Watch Los Angeles get built, one building at a time (1880–2026)

https://lax-skyline.parcelscope.net/
192•rustywasm•5h ago•94 comments

Show HN: Stuxnet – A reconstructed source code of the infamous cyber-weapon

https://github.com/Sadpainy/Stuxnet
35•CMDDestory•2h ago•7 comments

Trusting-Trust Attack against an Entire Linux Distribution

https://arxiv.org/abs/2607.24888
132•signa11•2d ago•32 comments

Leaving VMware just got harder after Broadcom pulled VDDK downloads

https://www.virtualizationhowto.com/2026/09/leaving-vmware-just-got-harder-after-broadcom-pulled-...
67•josephcsible•3h ago•28 comments

Working on Economics with Fable 5

https://wilsoniumite.com/2026/08/03/working-on-economics-with-fable-5/
45•Wilsoniumite•3h ago•22 comments

WeatherNext 3

https://deepmind.google/science/weathernext/
208•matthieu_bl•4d ago•43 comments

Scientists observe Einstein's gravity in the quantum world

https://www.ox.ac.uk/news/2026-08-28-scientists-observe-einsteins-gravity-in-the-quantum-world
124•mudil•3d ago•28 comments

TALA Is Open-Source

https://d2lang.com/blog/tala-is-open-source/
7•alixanderwang•51m ago•1 comments

Finding a bug in Dummit and Foote's Abstract Algebra

https://kallus.org/blog/dummit_and_foote.html
57•evakhoury•3d ago•32 comments

Show HN: I built an aesthetically pleasing puzzle

https://jigsawhaiku.com/
30•windowshopping•3d ago•6 comments

Show HN: Interactive Tree of Life

https://ptree.org/
49•Lucent•3d ago•14 comments

216M Spy TVs – The LG Smart TV Problem [video]

https://www.youtube.com/watch?v=6IFVTcM28KA
457•treve•1d ago•704 comments

This Month in Ladybird – August 2026

https://ladybird.org/newsletter/2026-08-31/
143•exploraz•3d ago•30 comments

Decoding the NEC V20 Microcode

https://martypc.blogspot.com/2026/09/decoding-nec-v20-microcode.html
112•mariuz•3d ago•7 comments

Caltech Mathathon – first hackathon ever devoted to research level mathematics

https://mathathonchallenge.com/index.html
216•astroanax•15h ago•77 comments

Icy Moons Are Ocean Worlds

https://mceglowski.substack.com/p/icy-moons-are-ocean-worlds
124•worldvoyageur•1d ago•11 comments

Macbeth and His Problems

https://porticoquarterly.com/essay/macbeth-and-his-problems/
30•apophatic•3h ago•12 comments

Simple Is Not Small

https://jyn.dev/simple-is-not-the-same-as-small/
179•zdw•4d ago•59 comments

Methods for Random Gradients (2024)

https://justinjay.wang/methods-for-random-gradients/
42•nickswalker•4d ago•4 comments

Decapitating a MacBook (2025)

https://mm-dev.rocks/series/decapitating-macbook-an-odyssey/
53•luu•1d ago•37 comments

Keep Our Servers Running

https://blog.archive.org/2026/09/01/keep-our-servers-running-your-recurring-donation-goes-3x-this...
941•sonicrocketman•20h ago•244 comments

bzip3

https://github.com/iczelia/bzip3
366•tosh•10h ago•104 comments

My practical approach to surfing the web safely

https://molily.de/safe-websurfing/
64•ethanhawksley•5d ago•32 comments

The Dataflow Model Revisited

https://www.vldb.org/pvldb/volumes/19/paper/The%20Dataflow%20Model%20Revisited
80•scott_s•1d ago•14 comments

Replaceable but Employed: Automation and the Meaning of Work

https://www.nber.org/papers/w35559
51•mooreds•5h ago•37 comments

Catching Crumbs from the Table (2000)

https://www.nature.com/articles/35014679
12•stefanpie•1d ago•4 comments

Live map of public transport in Belgium

https://openbaarvervoerbelgie.be/
184•coinfused•15h ago•77 comments

Whistle Synth Mac App

https://www.jefftk.com/p/whistle-synth-mac-app
59•luu•3d ago•14 comments

She Also Found It at the Movies

https://hedgehogreview.com/web-features/thr/posts/she-also-found-it-at-the-movies
19•prismatic•3d ago•4 comments

How to bring up the Linux Kernel on a new platform

https://werwolv.net/posts/linux_bringup/
67•WerWolv•4d ago•5 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."