frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Advent of Code 2025

https://adventofcode.com/2025/about
277•vismit2000•3h ago•94 comments

Windows drive letters are not limited to A-Z

https://www.ryanliptak.com/blog/windows-drive-letters-are-not-limited-to-a-z/
134•LorenDB•2h ago•38 comments

The Thinking Game Film – Google DeepMind Documentary

https://thinkinggamefilm.com
24•ChrisArchitect•30m ago•12 comments

Migrating Dillo from GitHub

https://dillo-browser.org/news/migration-from-github/
104•todsacerdoti•2h ago•68 comments

CachyOS: Fast and Customizable Linux Distribution

https://cachyos.org/
166•doener•5h ago•166 comments

Atlas Shrugged

https://david-jasso.com/2024/04/11/atlas-shrugged/
15•mnky9800n•46m ago•9 comments

Modern cars are spying on you. Here's what you can do about it

https://apnews.com/article/auto-car-privacy-3674ce59c9b30f2861d29178a31e6ab7
41•MilnerRoute•45m ago•20 comments

Show HN: Boing

https://boing.greg.technology/
569•gregsadetsky•12h ago•103 comments

Show HN: Real-time system that tracks how news spreads across 200k websites

https://yandori.io/news-flow/
141•antiochIst•4d ago•34 comments

Paul Hegarty's updated CS193p SwiftUI course released by Stanford

https://cs193p.stanford.edu/
64•yehiaabdelm•4d ago•7 comments

Norway wealth fund to vote for human rights report at Microsoft, against Nadella

https://www.cnbc.com/2025/11/30/norway-wealth-fund-to-vote-for-human-rights-report-at-microsoft-a...
160•saubeidl•2h ago•84 comments

Zigbook Is Plagiarizing the Zigtools Playground

https://zigtools.org/blog/zigbook-plagiarizing-playground/
390•todsacerdoti•12h ago•107 comments

Don't throw away your old PC–it makes a better NAS than anything you can buy

https://www.howtogeek.com/turned-old-windows-pc-into-inexpensive-nas/
66•makerdiety•2h ago•54 comments

All it takes is for one to work out

https://alearningaday.blog/2025/11/28/all-it-takes-is-for-one-to-work-out-2/
662•herbertl•20h ago•302 comments

RL is more information inefficient than you thought

https://www.dwarkesh.com/p/bits-per-sample
81•cubefox•3d ago•24 comments

Show HN: I engineered a 2mm micro-bearing D20 ring that free-spin for 20 seconds

14•spinity•4d ago•6 comments

What's Hiding Inside Haribo's Power Bank and Headphones?

https://www.lumafield.com/first-article/posts/whats-hiding-inside-haribos-power-bank-and-headphones
115•rozenmd•2d ago•40 comments

The space of minds

https://karpathy.bearblog.dev/the-space-of-minds/
44•Garbage•6h ago•15 comments

The Easiest Way to Build a Type Checker

https://jimmyhmiller.com/easiest-way-to-build-type-checker
27•surprisetalk•3d ago•4 comments

Meshtastic

https://meshtastic.org/
240•debo_•15h ago•53 comments

Jiga (YC W21) Is Hiring Product Designer

https://www.ycombinator.com/companies/jiga/jobs/Cco7vyK-product-designer-remote-europe
1•grmmph•9h ago

Landlock-Ing Linux

https://blog.prizrak.me/post/landlock/
250•razighter777•19h ago•101 comments

The HTTP Query Method

https://www.ietf.org/archive/id/draft-ietf-httpbis-safe-method-w-body-14.html
229•Ivoah•4d ago•101 comments

Apple Desktop Bus Protocol (2021)

https://www.lopaciuk.eu/2021/03/26/apple-adb-protocol.html
4•dcminter•2h ago•0 comments

Datacenters in space aren't going to work

https://taranis.ie/datacenters-in-space-are-a-terrible-horrible-no-good-idea/
399•mindracer•1d ago•340 comments

Learning Feynman's Trick for Integrals

https://zackyzz.github.io/feynman.html
237•Zen1th•20h ago•31 comments

Geothermal Breakthrough in South Texas Signals New Era for Ercot

https://www.powermag.com/geothermal-breakthrough-in-south-texas-signals-new-era-for-ercot/
23•mooreds•2h ago•9 comments

Americans no longer see four-year college degrees as worth the cost

https://www.nbcnews.com/politics/politics-news/poll-dramatic-shift-americans-no-longer-see-four-y...
386•jnord•17h ago•612 comments

A new Little Prince museum has opened its doors in Switzerland

https://www.lepetitprince.com/en/events-around-the-world/a-new-little-prince-museum-has-opened-it...
88•gnabgib•15h ago•53 comments

Leak confirms OpenAI is preparing ads on ChatGPT for public roll out

https://www.bleepingcomputer.com/news/artificial-intelligence/leak-confirms-openai-is-preparing-a...
768•fleahunter•1d ago•679 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•6mo ago

Comments

steele•6mo ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•6mo ago
Lmao, gentrify cracked me up
neilv•6mo ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•6mo ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•6mo ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•6mo ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•6mo ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•6mo ago
May as well just release an executable tbh.
theamk•6mo ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•6mo ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•6mo ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."