frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Superman copy found in mum's attic is most valuable comic ever at $9.12M

https://www.bbc.com/news/articles/c8e9rp0knj6o
219•1659447091•5h ago•89 comments

Roblox CEO Makes a Fool of Himself in Car-Crash Interview

https://kotaku.com/roblox-new-york-times-interview-baszucki-2000646174
26•tobr•1h ago•8 comments

Personal blogs are back, should niche blogs be next?

https://disassociated.com/personal-blogs-back-niche-blogs-next/
332•gnabgib•12h ago•209 comments

Kodak Ran a Secret Nuclear Device in Its Basement for Decades

https://www.popularmechanics.com/science/energy/a69147321/kodak-film-nuclear-reactor/
69•cainxinth•6d ago•7 comments

Helping Valve to power up Steam devices

https://www.igalia.com/2025/11/helpingvalve.html
615•TingPing•17h ago•198 comments

The Connectivity Standards Alliance Announces Zigbee 4.0 and Suzi

https://csa-iot.org/newsroom/the-connectivity-standards-alliance-announces-zigbee-4-0-and-suzi-em...
49•paulatreides•3d ago•25 comments

Samsung's 60% DRAM price hike signals a new phase of global memory tightening

https://www.buysellram.com/blog/samsungs-memory-price-surge-sends-shockwaves-through-the-global-d...
283•redohmy•1w ago•230 comments

Show HN: Wealthfolio 2.0- Open source investment tracker. Now Mobile and Docker

https://wealthfolio.app/?v=2.0
530•a-fadil•18h ago•174 comments

Moss Survives 9 Months in Space Vacuum

https://scienceclock.com/moss-survives-9-months-in-space-vacuum/
77•ashishgupta2209•7h ago•33 comments

Single-Celled Marine Organisms Resulted in an Influential Illustrated Book

https://lithub.com/how-the-discovery-of-single-celled-marine-organisms-resulted-in-one-of-the-mos...
7•PaulHoule•1w ago•0 comments

How I learned Vulkan and wrote a small game engine with it (2024)

https://edw.is/learning-vulkan/
102•jakogut•11h ago•53 comments

Sharper MRI scans may be on horizon thanks to new physics-based model

https://news.rice.edu/news/2025/sharper-mri-scans-may-be-horizon-thanks-new-physics-based-model
70•hhs•10h ago•18 comments

We should all be using dependency cooldowns

https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns
364•todsacerdoti•20h ago•215 comments

Event Sourcing in Go: From Zero to Production

https://skoredin.pro/blog/golang/event-sourcing-go
17•tdom•4d ago•3 comments

Discontinuation of ARM Notebook with Snapdragon X Elite SoC

https://www.tuxedocomputers.com/en/Discontinuation-of-ARM-notebooks-with-Snapdragon-X-Elite-SoC.t...
133•Venn1•15h ago•57 comments

Self-hosting a NAT Gateway

https://www.awsistoohard.com/blog/self-hosting-nat-gateway
129•veryrealsid•4d ago•75 comments

You can make PS2 games in JavaScript

https://jslegenddev.substack.com/p/you-can-now-make-ps2-games-in-javascript
268•tosh•18h ago•66 comments

LAPD helicopter tracker with real-time operating costs

https://lapdhelicoptertracker.com/
158•polalavik•12h ago•179 comments

Childhood Friends, Not Moms, Shape Attachment Styles Most

https://nautil.us/childhood-friends-not-moms-shape-attachment-styles-most-1247316/
203•dnetesn•1w ago•71 comments

Pixar: The Early Days A never-before-seen 1996 interview

https://stevejobsarchive.com/stories/pixar-early-days
122•sanj•14h ago•9 comments

Automating rootless Docker host updates with Ansible

https://du.nkel.dev/blog/2025-11-15_docker-rootless-ansible/
26•Helmut10001•1w ago•0 comments

Concrete Shipbuilding – Argentina

https://thecretefleet.com/blog/f/concrete-shipbuilding-–-argentina
12•surprisetalk•5d ago•3 comments

Shop Sans is a typeface for curved text paths

https://www.futurefonts.com/hex/shop-sans
167•tobr•1w ago•41 comments

Make product worse, get money

https://dynomight.net/worse/
103•zdw•19h ago•106 comments

Solving Fizz Buzz with Cosines

https://susam.net/fizz-buzz-with-cosines.html
161•hprotagonist•17h ago•49 comments

Building a Durable Execution Engine with SQLite

https://www.morling.dev/blog/building-durable-execution-engine-with-sqlite/
140•ingve•1d ago•45 comments

Jack Ma's family shifted wealth to UK after years-long 'disappearance'

https://www.source-material.org/jack-ma-bought-uk-home-after-years-long-disappearance/
4•robtherobber•48m ago•0 comments

XBMC 4.0 for the Original Xbox

https://www.xbox-scene.info/articles/announcing-xbmc-40-for-the-original-xbox-r64/
160•zdw•19h ago•83 comments

Arduino Terms of Service and Privacy Policy update: setting the record straight

https://blog.arduino.cc/2025/11/21/the-arduino-terms-of-service-and-privacy-policy-update-setting...
59•manchoz•13h ago•47 comments

Making a Small RPG

https://jslegenddev.substack.com/p/making-a-small-rpg
195•ibobev•21h ago•35 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•6mo ago

Comments

steele•6mo ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•6mo ago
Lmao, gentrify cracked me up
neilv•6mo ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•6mo ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•6mo ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•6mo ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•6mo ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•6mo ago
May as well just release an executable tbh.
theamk•6mo ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•6mo ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•6mo ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."