frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Bombadil: Property-based testing for web UIs by Antithesis

https://github.com/antithesishq/bombadil
79•Klaster_1•4d ago•17 comments

Migrating to the EU

https://rz01.org/eu-migration/
465•exitnode•4h ago•383 comments

POSSE – Publish on your Own Site, Syndicate Elsewhere

https://indieweb.org/POSSE
265•tosh•6h ago•58 comments

GitHub appears to be struggling with measly three nines availability

https://www.theregister.com/2026/02/10/github_outages/
209•richtr•3h ago•109 comments

Attractive students no longer receive better results as classes moved online

https://www.sciencedirect.com/science/article/pii/S016517652200283X
212•jdthedisciple•2h ago•186 comments

PC Gamer recommends RSS readers in a 37mb article that just keeps downloading

https://stuartbreckenridge.net/2026-03-19-pc-gamer-recommends-rss-readers-in-a-37mb-article/
706•JumpCrisscross•20h ago•333 comments

General Motors Is Assisting with the Restoration of a Rare EV1

https://evinfo.net/2026/03/general-motors-is-assisting-with-the-restoration-of-an-1996-ev1/
45•betacollector64•2d ago•36 comments

An Unsolicited Guide to Being a Researcher [pdf]

https://emerge-lab.github.io/papers/an-unsolicited-guide-to-good-research.pdf
25•sebg•4d ago•1 comments

Tin Can, a 'landline' for kids

https://www.businessinsider.com/tin-can-landline-kids-cellphone-cell-alternative-how-2025-9
214•tejohnso•3d ago•176 comments

The gold standard of optimization: A look under the hood of RollerCoaster Tycoon

https://larstofus.com/2026/03/22/the-gold-standard-of-optimization-a-look-under-the-hood-of-rolle...
451•mariuz•19h ago•128 comments

Reports of code's death are greatly exaggerated

https://stevekrouse.com/precision
476•stevekrouse•1d ago•340 comments

Can you get root with only a cigarette lighter? (2024)

https://www.da.vidbuchanan.co.uk/blog/dram-emfi.html
118•HeliumHydride•3d ago•20 comments

The future of version control

https://bramcohen.com/p/manyana
578•c17r•23h ago•317 comments

Cyberattack on vehicle breathalyzer company leaves drivers stranded in the US

https://techcrunch.com/2026/03/20/cyberattack-on-vehicle-breathalyzer-company-leaves-drivers-stra...
27•speckx•1h ago•11 comments

Show HN: The King Wen Permutation: [52, 10, 2]

https://gzw1987-bit.github.io/iching-math/
36•gezhengwen•6h ago•21 comments

Why I love NixOS

https://www.birkey.co/2026-03-22-why-i-love-nixos.html
371•birkey•21h ago•258 comments

The way CTRL-C in Postgres CLI cancels queries is incredibly hack-y

https://neon.com/blog/ctrl-c-in-psql-gives-me-the-heebie-jeebies
97•andrenotgiant•3d ago•27 comments

Project Nomad – Knowledge That Never Goes Offline

https://www.projectnomad.us
511•jensgk•1d ago•184 comments

Fear and Fragility: The Glass Delusion and Its History

https://publicdomainreview.org/essay/fear-and-fragility-the-glass-delusion-and-its-history
3•Petiver•3d ago•0 comments

You are not your job

https://jry.io/writing/you-are-not-your-job/
274•jryio•23h ago•290 comments

Walmart: ChatGPT checkout converted 3x worse than website

https://searchengineland.com/walmart-chatgpt-checkout-converted-worse-472071
200•speckx•3d ago•146 comments

GoGoGrandparent (YC S16) is hiring Back end Engineers

https://www.ycombinator.com/companies/gogograndparent/jobs/2vbzAw8-backend-engineer
1•davidchl•10h ago

Flash-MoE: Running a 397B Parameter Model on a Laptop

https://github.com/danveloper/flash-moe
368•mft_•1d ago•117 comments

Dataframe 1.0.0.0

https://discourse.haskell.org/t/ann-dataframe-1-0-0-0/13834
67•internet_points•5h ago•12 comments

Jazz CRJ9 at New York on Mar 22nd 2026, collision with fire truck on runway

https://avherald.com/h?article=536bb98e
47•Shank•3h ago•31 comments

The LCA problem revisited [pdf]

https://www3.cs.stonybrook.edu/~bender/talks/BenderFa00-lca-talk.pdf
21•remywang•5d ago•5 comments

What young workers are doing to AI-proof themselves

https://www.wsj.com/economy/jobs/ai-jobs-young-people-careers-14282284
179•wallflower•20h ago•278 comments

GrapheneOS will remain usable by anyone without requiring personal information

https://grapheneos.social/@GrapheneOS/116261301913660830
505•nothrowaways•17h ago•144 comments

Building an FPGA 3dfx Voodoo with Modern RTL Tools

https://noquiche.fyi/voodoo
212•fayalalebrun•1d ago•48 comments

Five years of running a systems reading group at Microsoft

https://armaansood.com/posts/systems-reading-group/
184•Foe•21h ago•52 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•10mo ago

Comments

steele•10mo ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•10mo ago
Lmao, gentrify cracked me up
neilv•10mo ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•10mo ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•10mo ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•10mo ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•10mo ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•10mo ago
May as well just release an executable tbh.
theamk•10mo ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•10mo ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•10mo ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."