frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

πFS

https://github.com/philipl/pifs
210•helterskelter•2h ago•62 comments

How JPL keeps the 13-year-old Curiosity rover doing science

https://spectrum.ieee.org/curiosity-rover-jpl-mars-science
114•pseudolus•4h ago•18 comments

I'm Eric Ries, author of "The Lean Startup" and new book "Incorruptible" – AMA

431•eries•6h ago•365 comments

PgDog is funded and coming to a database near you

https://pgdog.dev/blog/our-funding-announcement
328•levkk•7h ago•167 comments

L'Affaire Siloxane

https://mceglowski.substack.com/p/laffaire-siloxane
89•idlewords•1d ago•17 comments

What Is It Like to Be a Bat? [pdf] (1974)

https://www.sas.upenn.edu/~cavitch/pdf-library/Nagel_Bat.pdf
22•shadow28•1h ago•16 comments

GeoLibre 1.0

https://geolibre.app/
68•jonbaer•3h ago•5 comments

Farmer donates land for a park, city sells it for $10M as data center land

https://www.tomshardware.com/tech-industry/farmer-donates-land-for-a-park-city-sells-it-for-data-...
167•maxloh•2h ago•29 comments

Show HN: HelixDB – A graph database built on object storage

https://github.com/HelixDB/helix-db/tree/main
68•GeorgeCurtis•5h ago•28 comments

Anthropic's Model Naming, Extrapolated

https://samwilkinson.io/posts/2026-06-09-anthropics-model-naming-extrapolated
211•sammycdubs•2h ago•55 comments

Authentication issues related to API requests

https://www.githubstatus.com/incidents/fcj3088jg1wx
145•Multicomp•6h ago•25 comments

Mercedes‑Benz starts large‑scale production of electric axial flux motor

https://media.mercedes-benz.com/en/article/bebac2af-acdc-465a-9538-adb0bf3d8ccf
480•raffael_de•13h ago•296 comments

Building an HTML-first site doubled our users overnight

https://mohkohn.co.uk/writing/html-first/
914•edent•8h ago•416 comments

Claude Desktop spawns 1.8 GB Hyper-V VM on every launch, even for chat-only use

https://github.com/anthropics/claude-code/issues/29045
269•tonyrice•4h ago•185 comments

Show HN: Extend UI – open-source UI kit for modern document apps

https://www.extend.ai/ui
80•kbyatnal•5h ago•16 comments

Apache Burr: Build reliable AI agents and applications

https://burr.apache.org/
143•anhldbk•6h ago•81 comments

Show HN: Artie – Real-time data replication to your warehouse, now self-serve

https://www.artie.com
12•tang8330•16h ago•5 comments

Raspberry Pi 5 – 16 GB, $350

https://www.adafruit.com/product/6125?src=raspberrypi
77•akman•1h ago•89 comments

Show HN: Atlasphere – Live Infrastructure Diagrams

10•andreygrehov•1d ago•2 comments

All 9,300 Japanese train station, animated by the year it opened (1872–2026)

https://jivx.com/eki
170•momentmaker•9h ago•59 comments

A game's homemade crypto fell to a DIY supercomputer

https://www.ud2.rip/blog/towerunite/
4•vmfunc•1d ago•0 comments

Smudging the game disc to make speedrunning 'SpongeBob' faster

https://www.inverse.com/input/gaming/the-dirty-secret-that-makes-speedrunning-on-spongebob-a-lot-...
49•pncnmnp•19h ago•29 comments

Who's the Smartest Corvid?

https://thetyee.ca/Culture/2026/06/05/Whos-the-Smartest-Corvid/
47•NaOH•1d ago•39 comments

Meta steals a tactic from Tesla and builds data centers in tents

https://techcrunch.com/2026/06/04/meta-steals-a-tactic-from-tesla-and-builds-data-centers-in-tents/
77•gnabgib•4h ago•78 comments

A €0.01 bank transfer could compromise a banking AI agent

https://blue41.com/blog/how-we-helped-bunq-secure-their-financial-ai-assistant/
145•tvissers•7h ago•124 comments

Pick and Place: Carbon Nanotube Nanoassembly Process

https://www.c12qe.com/news/pick-and-place-carbon-nanotube-quantum-chip-manufacturing
11•bpierre•2d ago•2 comments

DiffusionGemma: 4x Faster Text Generation

https://blog.google/innovation-and-ai/technology/developers-tools/diffusion-gemma-faster-text-gen...
236•meetpateltech•5h ago•51 comments

The Abundance Illusion

https://www.carlyle.com/carlyle-compass/the-abundance-illusion
51•cwal37•1h ago•22 comments

Why SpaceX 2040 Revenue FCST $4.3T in highly unlikely

https://www.matteast.io/spacex-escape-velocity.html
157•meast•3h ago•143 comments

Buy a train, bridge or tracks from the Swiss Railway

https://sbbresale.ch/
157•kisamoto•2d ago•86 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."