frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Wine ported to OpenBSD

https://marc.info/?l=openbsd-ports&m=179236125692175
321•iamnothere•4h ago•82 comments

MiniMax M3.1 Flash

https://www.minimax.io/blog/minimax-m31f
31•jtg•1h ago•7 comments

RuneScape Bench: MMOs for Agents [video]

https://www.youtube.com/watch?v=cNm4zyUtWj0
23•evakhoury•1d ago•7 comments

It's still ok to enjoy programming

https://chriskiehl.com/article/it-is-still-ok-to-enjoy-programming
150•goostavos•1d ago•151 comments

Timestral: Mistral's time-series foundation models

https://mistral.ai/news/timestral/
398•groar•8h ago•76 comments

Mercury 3: Diffusion at scale

https://www.inceptionlabs.ai/blog/introducing-mercury-3
74•cmrdporcupine•37m ago•27 comments

Evidence (YC S21) Is Hiring Software Engineers

https://evidence.dev/jobs
1•hughess•43m ago

Alternatives to animal testing are finally taking off

https://spectrum.ieee.org/alternatives-to-animal-testing
213•rbanffy•6h ago•50 comments

Android apps running native on macOS

https://github.com/kksimp/Mac.apk
20•flocked•1h ago•2 comments

Galois Finite Fields and the Advanced Encryption Standard (AES)

https://www.cs.uaf.edu/2015/spring/cs463/lecture/03_23_AES.html
30•ankitg12•2d ago•0 comments

CERN and Mistral sign a statement of intent to establish a strategic partnership

https://home.cern/cern-and-mistral-join-forces-to-accelerate-ai-for-science/
201•kensai•2h ago•39 comments

The obscure trust looming over Anthropic's IPO

https://www.wsj.com/tech/ai/anthropic-ipo-private-trust-188f41f7?st=RtdGHg&reflink=desktopwebshar...
11•1vuio0pswjnm7•5h ago•1 comments

Let's Encrypt is adding two additional remote perspectives for domain validation

https://community.letsencrypt.org/t/lets-encrypt-is-adding-two-additional-remote-perspectives-for...
182•gslin•7h ago•59 comments

Launch HN: Laminar (YC S24) – We trained a model to catch silent agent failures

21•skull8888888•2h ago•6 comments

Degraded availability for GitHub Actions, GitHub Pages and Webhooks

https://www.githubstatus.com/incidents/8tzbpcnl75jp
123•gateauxd•2h ago•89 comments

Show HN: I built a task system to handle the drudgery so I could focus on tasks

https://3anddoneapp.com/try
22•dmayle•4h ago•15 comments

Plex vulnerabilities being exploited in the wild to drop a cryptominer

http://www.boredhackerblog.info/2026/10/plex-vulnerabilities-being-exploited-in.html
54•mindracer•4h ago•8 comments

Ontology-Driven Observability: Building an End-to-End Knowledge Graph at Netflix

https://netflixtechblog.com/ontology-driven-observability-building-an-end-to-end-knowledge-graph-...
91•tosh•2h ago•20 comments

A death, a plagiarism scandal and a quest for revenge: the tale of Otto Z

https://www.theguardian.com/news/ng-interactive/2026/oct/08/a-death-a-plagiarism-scandal-and-a-qu...
47•Hooke•2d ago•13 comments

Show HN: KiviDB, a faster Redis-compatible memory database and vector cache

https://github.com/kividbio/kividb
54•murtazayusuf•4h ago•30 comments

William Gibson and the trademarking of cyberspace

https://colo.to/cyberspace.html
255•Eric_Gullichsen•18h ago•116 comments

Europe EV sales rose 70.3% in September, 32.6% of market share

https://www.reuters.com/business/europe-ev-sales-rose-70-september-almost-30-market-share-2026-10...
61•giuliomagnifico•34m ago•21 comments

ESA's Hera Will View Asteroid Scars from DART's Strike

https://spectrum.ieee.org/esa-hera-dimorphos-rendezvous
60•rbanffy•6h ago•5 comments

Maybe There Was an Egg Cartel After All

https://www.politico.com/news/magazine/2026/10/18/egg-prices-conspiracy-affordability-issue-01100411
147•iamnothere•3h ago•103 comments

Show HN: Qwen3-4B with the AI writing tics trained out

https://100toolkit.com/blog/deslop-model/
129•erikkannike•5h ago•95 comments

Gdynia and the Dream of a Maritime Poland

https://engelsbergideas.com/notebook/gdynia-and-the-dream-of-a-maritime-poland/
100•lermontov•2d ago•29 comments

Linux 7.3

https://lwn.net/Articles/1101143/
556•cjd8•10h ago•250 comments

Hybrid Reasoning Agents: LLM agents that think in latent space, act through text

https://arxiv.org/abs/2610.18861
497•allinonai•21h ago•231 comments

Pentulive (Puppy Live) [video]

https://yle.fi/t/18-332106/fi
5•NaOH•1h ago•1 comments

There's never been a better time to go into math (by: 3blue1brown) [video]

https://www.youtube.com/watch?v=LKrwhjOI8Nc
519•mdp2021•1d ago•727 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."