frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Git for the US Code

https://lexifina.com/blog/git-for-the-us-code
225•alansaber•6h ago•113 comments

Genie 4

https://deepmind.google/blog/genie-4-a-new-generation-of-world-simulation/
862•acossta•16h ago•504 comments

Ghostty 1.4

https://ghostty.org/docs/install/release-notes/1-4-0
976•deaux•15h ago•304 comments

Ink droplets in motion snag top prize in Nikon Small World contest

https://arstechnica.com/science/2026/10/meet-the-2026-winner-of-nikons-small-world-photomicrograp...
199•_Microft•2d ago•31 comments

Survival LLM: AI assistant and emergency library that runs on your own computer

https://www.brangus.io/survival-llm
323•Luc•12h ago•135 comments

MacOS Extensions Pack for the Apple Network Server v1.0

http://oldvcr.blogspot.com/2026/10/macos-extensions-pack-for-apple-network.html
23•classichasclass•3d ago•0 comments

Tailscale SSH: Investigation and remediation update

https://tailscale.com/ssh-investigation-update
270•figmert•12h ago•140 comments

Early progress on accelerating drug development with Claude

https://www.anthropic.com/research/early-progress-drug-development
215•dataking•11h ago•190 comments

SS United States to be sunk as largest artificial reef

https://divemagazine.com/scuba-diving-news/ss-united-states-to-be-sunk-as-worlds-largest-artifici...
134•geox•2d ago•96 comments

Raspberry Pi Zero 3W and Pi 4 Model A spotted in device trees

https://bret.dk/raspberry-pi-zero-3-w-pi-4-model-a/
153•sthlmb•11h ago•79 comments

Python's experimental JIT to be removed

https://lwn.net/SubscriberLink/1102102/0c00e4d550f25f8c/
492•f311a•21h ago•264 comments

New 14‑inch MacBook Pro with M6

https://www.apple.com/in/newsroom/2026/10/apple-introduces-the-new-14-inch-macbook-pro-with-m6/
349•beex•16h ago•456 comments

Code-execution flaw in UEFI firmware threatens most servers on planet Earth

https://arstechnica.com/security/2026/10/code-execution-flaw-in-uefi-firmware-threatens-most-serv...
124•DamnInteresting•11h ago•50 comments

A Love Letter to the Super Dimension Fortress

https://brennan.day/a-love-letter-to-the-super-dimension-fortress/
50•jruohonen•3d ago•8 comments

Decompiling Fast Food Tycoon 2: Drawing the World

https://healeycodes.com/decompiling-fast-food-tycoon-2-drawing-the-world
16•healeycodes•3d ago•3 comments

What Happened to the Neanderthals?

https://www.nytimes.com/2026/10/26/science/what-happened-to-the-neanderthals.html
27•Hooke•1d ago•23 comments

New iMac with M6

https://www.apple.com/imac/
329•notfried•19h ago•417 comments

Classification of Finite Simple Groups Formalized in Lean

https://cfsg.axiommath.ai/
205•pfdietz•15h ago•57 comments

Jokes for the ZX81

https://spelk.press/gb/products/81-jokes-for-the-zx81
80•robin_reala•1d ago•7 comments

An examination of lost firefly species of the US and Canada

https://journaloflostspecies.org/index.php/jls/article/view/37/33
118•bryanrasmussen•3d ago•37 comments

Assembly Nights (2021)

https://ratfactor.com/assembly-nights
49•andsoitis•2d ago•9 comments

Four Months of Zig

https://gracefulliberty.com/articles/four-months-of-zig/
113•ibobev•12h ago•71 comments

Hunger beats tenure: Advice for junior engineers

https://felixrieseberg.com/hunger-beats-tenure-advice-for-junior-engineers/
53•akavi•9h ago•23 comments

US Government is hiding a secret court ruling about how it spies on Americans

https://www.wired.com/story/the-us-government-is-hiding-a-secret-court-ruling-about-how-it-spies-...
916•helterskelter2•18h ago•331 comments

Moxnox 1.0: NT-Like, POSIX-Compatible OS Running Atop Btrfs

https://github.com/maharmstone/moxnox
61•SockThief•8h ago•10 comments

Artificial Analysis Intelligence Index v5

https://artificialanalysis.ai/articles/artificial-analysis-intelligence-index-v5
29•hn-aarvin•5h ago•40 comments

Radio-tagged Monarch butterflies

https://news.vt.edu/articles/2026/10/cmi-monarchs.html
53•rdmuser•14h ago•17 comments

Why Micron Is Suddenly Ditching 4F² DRAM as Rivals Double Down

https://hothardware.com/news/why-micron-is-suddenly-ditching-4f-dram
162•rbanffy•1d ago•25 comments

State of ARM Support for Puget Bench

https://www.pugetsystems.com/blog/2026/10/22/state-of-arm-support-for-puget-bench/
4•zdw•5d ago•0 comments

Introducing LFM3: Every Modality for Specialized Intelligence

https://www.liquid.ai/blog/lfm3
142•Philpax•15h ago•54 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."