frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Does Georgism work? Five years later

https://www.astralcodexten.com/p/does-georgism-work-five-years-later
55•silveraxe93•1d ago•22 comments

DeepSeek Elastic Compute (DSec)

https://arxiv.org/abs/2609.22978
143•shenli3514•6h ago•40 comments

Evolving programming languages in the AI era

https://dashbit.co/blog/evolving-ai-era
18•pjm331•1d ago•9 comments

PipePipe: NewPipe hard fork implementing SponsorBlock

https://github.com/InfinityLoop1308/PipePipe
311•Qision•1d ago•164 comments

An agent used DNS to reach an external chatbot

https://alignment.openai.com/misalignment-reports/an-agent-used-dns-to-reach-an-external-chatbot/
33•apsec112•20h ago•19 comments

Show HN: Reladraw – A diagram language where you decide where to place things

https://github.com/reladraw/reladraw
168•jpwalsh234•7h ago•47 comments

A searchable library of forgotten public-domain film clips from 1915 onward

https://www.movingimagearchive.com/
102•momentmaker•2d ago•23 comments

Go Concurrency Distilled

https://antonz.org/go-concurrency-distilled/
13•chmaynard•10h ago•1 comments

Welcome to the Medical Clinic at the Interplanetary Relay Station

https://www.lightspeedmagazine.com/fiction/welcome-to-the-medical-clinic-at-the-interplanetary-re...
41•bucket2015•4h ago•7 comments

LA Metro has some of the slowest escalators on Earth

https://basin.la/articles/ninety-feet-a-minute.html
72•big_toast•2d ago•49 comments

Drawgent: Coding agent on a live Excalidraw canvas

https://tangled.org/yanndegat.tngl.sh/drawgent
102•parasitid•8h ago•32 comments

Fifteen years later, the Apple Cards origin story

https://lexontech.org/fifteen-years-later-the-apple-cards-origin-story
335•ksec•15h ago•86 comments

How one Twitch chat message became code execution on a streamer’s PC

https://blog.scrt.ch/2026/09/22/how-one-twitch-chat-message-became-code-execution-on-a-streamers-pc/
20•tau255•23h ago•4 comments

HomeBody: A humanoid that explores, remembers, and acts on its own

https://tml.stanford.edu/homebody/
11•famouswaffles•5h ago•1 comments

Reverse-engineering the Intel 8087's tangent algorithm: more than CORDIC

https://www.righto.com/2026/09/8087-tangent-cordic.html
15•pwg•7h ago•3 comments

The Lost Atomic Update on Loongson CPU

https://jia.je/hardware/2026/09/24/loongson-cpu-erratum-en/
108•jiegec•2d ago•6 comments

Modern Object Pascal Introduction for Programmers

https://castle-engine.io/modern_pascal
142•birdculture•2d ago•57 comments

The Evolution of Vending Machines

https://www.saturdayeveningpost.com/2026/09/from-holy-water-to-frozen-meals-the-evolution-of-vend...
9•ohjeez•7h ago•1 comments

ASML says it sold 'absolutely nothing' in Europe in 2026

https://www.tomshardware.com/tech-industry/semiconductors/asml-says-its-sells-absolutely-nothing-...
136•MC995•1d ago•369 comments

Generate fonts where every LLM token is the same width

https://ampdot.mesh.host/token-space-fonts.html
21•z-mach9•1d ago•5 comments

Reading’s Bayeux Tapestry

https://diamondgeezer.blogspot.com/2026/09/readings-bayeux-tapestry.html
11•zeristor•13h ago•1 comments

Promising discoveries about the potential for life on one of Saturn’s icy moons

https://www.fu-berlin.de/en/presse/informationen/fup/2026/fup_26_116-enceladus-cassini-mikroben-s...
12•geox•21h ago•3 comments

How I changed teaching after AI managed to do all my homework assignments

https://thelastsoftwareengineer.substack.com/p/how-i-changed-teaching-after-ai-managed
121•azhenley•2d ago•127 comments

How to keep enjoying programming in a world of LLMs

https://discourse.haskell.org/t/how-to-keep-enjoying-programming-in-a-world-of-llms/14705
149•signa11•14h ago•208 comments

Dutch designer made DE9: Closer to the Edit into a playable web-based instrument

https://www.creativeboom.com/work/why-merijn-straathof-turned-a-landmark-techno-album-into-a-play...
6•ChrisArchitect•2d ago•1 comments

Japan moves to tighten rules for foreigners

https://www.aljazeera.com/economy/2026/9/25/japan-moves-to-tighten-rules-for-foreigners-throwing-...
120•mikhael•6h ago•318 comments

Analyzing Frontier Model Progress with My Favourite Game: Prince of Persia

https://blog.priyan.in/2026/09/analyzing-frontier-model-progress-with.html
55•msephton•1d ago•38 comments

Turning GLM-5.3-Flash into a Jev-like decision model

https://www.privatemode.ai/blog/system-one-from-glm-flash
8•flxflx•8h ago•3 comments

Breaking Up with Google Play: Why Conversations Is Now Free

https://gultsch.de/posts/breaking-up-with-google-play/
631•ezst•13h ago•249 comments

The Rise of Audio AR

https://www.dbreunig.com/2024/04/10/the_rise_of_audio_ar.html
28•dbreunig•2d ago•10 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."