frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Genie 4

https://deepmind.google/blog/genie-4-a-new-generation-of-world-simulation/
750•acossta•10h ago•447 comments

Ghostty 1.4

https://ghostty.org/docs/install/release-notes/1-4-0
791•deaux•9h ago•241 comments

Ink droplets in motion snag top prize in Nikon Small World contest

https://arstechnica.com/science/2026/10/meet-the-2026-winner-of-nikons-small-world-photomicrograp...
66•_Microft•2d ago•11 comments

Early progress on accelerating drug development with Claude

https://www.anthropic.com/research/early-progress-drug-development
141•dataking•5h ago•123 comments

Tailscale SSH: Investigation and remediation update

https://tailscale.com/ssh-investigation-update
201•figmert•6h ago•110 comments

Survival LLM: AI assistant and emergency library that runs on your own computer

https://www.brangus.io/survival-llm
194•Luc•6h ago•104 comments

Raspberry Pi Zero 3W and Pi 4 Model A spotted in device trees

https://bret.dk/raspberry-pi-zero-3-w-pi-4-model-a/
103•sthlmb•5h ago•37 comments

Tabletop Whale is an original science illustration blog

https://tabletopwhale.com
10•Levitating•3d ago•1 comments

81 Jokes for the ZX81

https://spelk.press/gb/products/81-jokes-for-the-zx81
39•robin_reala•1d ago•2 comments

Git for US Legislation

https://lexifina.com/blog/git-for-the-us-code
7•alansaber•36m ago•0 comments

New 14‑inch MacBook Pro with M6

https://www.apple.com/in/newsroom/2026/10/apple-introduces-the-new-14-inch-macbook-pro-with-m6/
288•beex•10h ago•365 comments

Python's experimental JIT to be removed

https://lwn.net/SubscriberLink/1102102/0c00e4d550f25f8c/
451•f311a•15h ago•236 comments

An examination of lost firefly species of the US and Canada

https://journaloflostspecies.org/index.php/jls/article/view/37/33
91•bryanrasmussen•3d ago•15 comments

Wikipedia's Cleanup of AI-Generated Content

https://spectrum.ieee.org/wikipedia-wikiproject-ai-writing-cleanup
457•rbanffy•15h ago•211 comments

SS United States to be sunk as largest artificial reef

https://divemagazine.com/scuba-diving-news/ss-united-states-to-be-sunk-as-worlds-largest-artifici...
88•geox•1d ago•59 comments

Reviewers rarely talk about reliability. Owners bring it up twice as often

https://www.bettascore.ai/research/reliability-reviewers-vs-owners
64•tsxng•3h ago•64 comments

New iMac with M6

https://www.apple.com/imac/
312•notfried•13h ago•383 comments

Classification of Finite Simple Groups Formalized in Lean

https://cfsg.axiommath.ai/
175•pfdietz•9h ago•44 comments

Radio-tagged Monarch butterflies

https://news.vt.edu/articles/2026/10/cmi-monarchs.html
32•rdmuser•8h ago•9 comments

Hex Raises $100M

https://hex.tech/blog/hex-new-era/
51•tomwphillips•5h ago•29 comments

Four Months of Zig

https://gracefulliberty.com/articles/four-months-of-zig/
77•ibobev•6h ago•48 comments

US Government is hiding a secret court ruling about how it spies on Americans

https://www.wired.com/story/the-us-government-is-hiding-a-secret-court-ruling-about-how-it-spies-...
800•helterskelter2•12h ago•291 comments

Introducing LFM3: Every Modality for Specialized Intelligence

https://www.liquid.ai/blog/lfm3
123•Philpax•9h ago•51 comments

Nvidia and Micron Make Up 34% of America's Earnings Boom

https://www.wsj.com/finance/stocks/the-earnings-boom-is-heavily-reliant-on-just-a-handful-of-stoc...
83•JumpCrisscross•2d ago•11 comments

Why Micron Is Suddenly Ditching 4F² DRAM as Rivals Double Down

https://hothardware.com/news/why-micron-is-suddenly-ditching-4f-dram
145•rbanffy•1d ago•22 comments

Moxnox 1.0: NT-Like, POSIX-Compatible OS Running Atop Btrfs

https://github.com/maharmstone/moxnox
14•SockThief•2h ago•3 comments

Land Value Capture in Practice: Ethiopia's Urban Land Lease System

https://blog.landeconomics.org/p/land-value-capture-in-practice-reflections
47•surprisetalk•1d ago•9 comments

Expanding our partnership with GSA to bring Claude to all levels of government

https://www.anthropic.com/news/expanding-partnership-gsa
23•matthieu_bl•4h ago•13 comments

Three TLS Bugs in GoAhead

https://foxio.io/blog/choose-your-backend-three-tls-bugs-in-goahead
61•owenshen24•7h ago•14 comments

Discord will soon let anyone find public server messages through Google

https://discord.com/blog/making-content-from-discoverable-servers-easier-to-discover
260•DeepLogin•7h ago•137 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."