frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

REA Reverse – Engineer Anything

https://rea.tools/
280•modinfo•5h ago•91 comments

Cloudflare acquires Deno

https://deno.com/blog/cloudflare
1156•ilreb•17h ago•592 comments

Telegram Desktop vulnerability allowed any user's file to be stolen

https://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/
60•g-b-r•3h ago•19 comments

Triple-A Minesweeper

https://minesweeper.mikelacher.com/
842•robin_reala•14h ago•163 comments

Eye of Sauron: Long-Range Hidden Spy Camera Detection

https://www.usenix.org/conference/usenixsecurity24/presentation/zhang-qibo
92•ortusdux•2d ago•16 comments

Typesafe AI raises $870M at $7.5B

https://typesafe.ai/blog/series-ai
334•tosh•13h ago•240 comments

Show HN: Carrier-Explode: iPhone, Pixel and Galaxy carrier settings decoded

https://carrierexplode.com/
271•simplyalec•12h ago•35 comments

Can you use autoregressive diffusion to generate market data?

https://blog.janestreet.com/can-you-use-autoregressive-diffusion-to-generate-market-data/
56•jsomers•15h ago•22 comments

How to head into VR without wearing a headset

https://www.kyushu-u.ac.jp/en/researches/view/414/
9•Betelbuddy•3d ago•0 comments

Compiling Rust to readable C with Eurydice

https://lwn.net/Articles/1055211/
55•peter_d_sherman•7h ago•6 comments

Pointing AI at archives found a forgotten meteorite, lost rhinos, and more

https://jessewaites.com/blog/post/i-pointed-ai-at-400-years-of-archives/
132•piratebroadcast•18h ago•71 comments

Show HN: A simple to-do app for iPhone, Mac, and your agent

https://ilia.page/writing/introducing-nagare
4•shmilia•1h ago•1 comments

Clinical trial of a prion disease drug candidate begins enrolling participants

https://www.broadinstitute.org/news/clinical-trial-prion-disease-drug-candidate-begins-enrolling-...
33•luu•6h ago•5 comments

Next.js 16.4

https://nextjs.org/blog/next-16-4
15•jhuleatt•4h ago•12 comments

YouTuber Says Cops Visited Him After He Built a Flock-Style Camera to Track Cops

https://gizmodo.com/youtuber-says-cops-paid-him-a-visit-after-he-built-flock-style-camera-to-trac...
518•gumby•9h ago•290 comments

Anthropic AI model submits false tip on unsolved Philly murder

https://www.nbcphiladelphia.com/news/local/anthropic-ai-model-submits-false-tip-on-unsolved-phill...
139•Zambyte•8h ago•106 comments

Show HN: Proton Drive for Linux

https://oss.lsantos.dev/proton-drive-linux-fs/
61•khaosdoctor•1d ago•21 comments

Scam American companies are using to manipulate ingredient lists

https://twitter.com/WallStreetApes/status/2108594998656807078
93•bilsbie•12h ago•100 comments

Communication Between the Compiler, the Build System, and Beyond

https://shrub.industries/words/problem.html
8•shrub900•3d ago•1 comments

What mathematicians should know about the Lean Theorem Prover: reliability & AI

https://terrytao.wordpress.com/2026/10/09/what-mathematicians-should-know-about-the-lean-theorem-...
82•matt_d•12h ago•17 comments

Our $445M Series D

https://oxide.computer/blog/our-445m-series-d
635•ahlCVA•17h ago•294 comments

The role of cat eye narrowing movements in cat–human communication (2020)

https://www.nature.com/articles/s41598-020-73426-0
66•bushwart•3d ago•24 comments

Show HN: The rarest tech books and docs you've probably never read

https://readrare.com/
109•miletus•12h ago•34 comments

'Wallace and Gromit,' 90% Alone

https://animationobsessive.substack.com/p/wallace-and-gromit-90-alone
192•vinhnx•16h ago•24 comments

Sorry, I'm in a meeting

https://iminafleeting.com/
853•splintersio•21h ago•246 comments

Put a price on breakthroughs

https://alexwang.ai/posts/put-a-price-on-breakthroughs/
12•ketothekingdom•3h ago•4 comments

Atari Falcon

https://atarimuseum.nl/atari-falcon/
38•debo_•7h ago•12 comments

100+ reactions to 100+ solutions

https://proofsandprompts.com/2026/10/08/100-reactions-to-100-solutions/
58•jacobedawson•18h ago•52 comments

Data Center Darling's $30B IPO Dream Crushed in 48 Hours

https://www.bloomberg.com/news/articles/2026-10-09/data-center-darling-s-30-billion-ipo-dream-cru...
20•mfiguiere•2h ago•7 comments

The Alchemical Transformations of the Mutus Liber (1677)

https://publicdomainreview.org/collection/mutus-liber/
7•benbreen•3d ago•0 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."