frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Greenland Ditches Starlink for French Satellite Service

https://www.dagens.com/technology/greenland-ditches-starlink-for-french-satellite-service
324•saubeidl•4h ago•182 comments

Knocker, a knock based access control system for your homelab

https://github.com/FarisZR/knocker
21•xlmnxp•2h ago•30 comments

Evaluating the Infinity Cache in AMD Strix Halo

https://chipsandcheese.com/p/evaluating-the-infinity-cache-in
91•zdw•6h ago•32 comments

Go Subtleties You May Not Know

https://harrisoncramer.me/15-go-sublteties-you-may-not-already-know/
66•darccio•1w ago•29 comments

Show HN: Cadence – A Guitar Theory App

https://cadenceguitar.com/
56•apizon•1w ago•8 comments

Evaluating Argon2 Adoption and Effectiveness in Real-World Software

https://arxiv.org/abs/2504.17121
14•pregnenolone•1w ago•1 comments

MinIO (apparently) becomes source-only

https://github.com/minio/minio/issues/21647
146•LexSiga•5h ago•103 comments

The Gypsy Life of Robert Louis Stevenson

https://hudsonreview.com/2025/10/the-gypsy-life-of-robert-louis-stevenson/
37•Caiero•14h ago•5 comments

rlsw – Raylib software OpenGL renderer in less than 5k LOC

https://github.com/raysan5/raylib/blob/master/src/external/rlsw.h
204•fschuett•14h ago•69 comments

LLMs can get "brain rot"

https://llm-brain-rot.github.io/
395•tamnd•20h ago•239 comments

Show HN: Modshim – A new alternative to monkey-patching in Python

https://github.com/joouha/modshim
76•joouha•6d ago•17 comments

Ask HN: Our AWS account got compromised after their outage

319•kinj28•19h ago•70 comments

Die shots of as many CPUs and other interesting chips as possible

https://commons.wikimedia.org/wiki/User:Birdman86
13•uticus•4d ago•0 comments

Neural audio codecs: how to get audio into LLMs

https://kyutai.org/next/codec-explainer
387•karimf•22h ago•113 comments

NASA chief suggests SpaceX may be booted from moon mission

https://www.cnn.com/2025/10/20/science/nasa-spacex-moon-landing-contract-sean-duffy
324•voxleone•22h ago•872 comments

Replacing a $3000/mo Heroku bill with a $55/mo server

https://disco.cloud/blog/how-idealistorg-replaced-a-3000mo-heroku-bill-with-a-55-server/
680•jryio•14h ago•459 comments

The Hidden Engineering of Niagara Falls

https://practical.engineering/blog/2025/10/21/the-hidden-engineering-of-niagara-falls
125•chmaynard•12h ago•10 comments

Greg Newby, CEO of the Project Gutenberg Literary Archive Foundation, Has Died

https://www.pgdp.net/wiki/In_Memoriam/gbnewby
11•ron_k•2h ago•1 comments

Power over Ethernet (PoE) basics and beyond

https://www.edn.com/poe-basics-and-beyond-what-every-engineer-should-know/
174•voxadam•5d ago•119 comments

Mathematicians have found a hidden 'reset button' for undoing rotation

https://www.newscientist.com/article/2499647-mathematicians-have-found-a-hidden-reset-button-for-...
154•mikhael•5d ago•100 comments

Getting DeepSeek-OCR working on an Nvidia Spark via brute force with Claude Code

https://simonwillison.net/2025/Oct/20/deepseek-ocr-claude-code/
174•simonw•1d ago•39 comments

ChatGPT Atlas

https://chatgpt.com/atlas
696•easton•18h ago•659 comments

Erowid - Documenting the Complex Relationship Between Humans and Psychoactives

https://www.erowid.org
116•slow_typist•14h ago•16 comments

Researchers complete first human trial on viability of enteral ventilation

https://newatlas.com/disease/butt-breathing-ignobel-prize/
66•mustaphah•16h ago•59 comments

OpenBSD 7.8

https://cdn.openbsd.org/pub/OpenBSD/7.8/ANNOUNCEMENT
218•paulnpace•9h ago•78 comments

Principles and Methodologies for Serial Performance Optimization

https://danglingpointers.substack.com/p/principles-and-methodologies-for
11•blakepelton•1w ago•0 comments

The death of thread per core

https://buttondown.com/jaffray/archive/the-death-of-thread-per-core/
126•ibobev•1d ago•50 comments

Build your own database

https://www.nan.fyi/database
506•nansdotio•18h ago•78 comments

Minds, brains, and programs (1980) [pdf]

https://home.csulb.edu/~cwallis/382/readings/482/searle.minds.brains.programs.bbs.1980.pdf
86•measurablefunc•1w ago•32 comments

Foreign hackers breached a US nuclear weapons plant via SharePoint flaws

https://www.csoonline.com/article/4074962/foreign-hackers-breached-a-us-nuclear-weapons-plant-via...
390•zdw•19h ago•303 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•5mo ago

Comments

steele•5mo ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•5mo ago
Lmao, gentrify cracked me up
neilv•5mo ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•5mo ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•5mo ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•5mo ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•5mo ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•5mo ago
May as well just release an executable tbh.
theamk•5mo ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•5mo ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•5mo ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."