frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Median net worth of U.S. households under 35 fell 23% from 2022 to 2025 (real)

https://www.keepingup.com/benchmarks/net-worth/age-30-33
73•jpmulhausen•36m ago•9 comments

Astra can read and write weights to improve Qwen

https://rikiyat.github.io/blog/weight-space-programming/
2135•dbreunig•9h ago•695 comments

Show HN: Hacker Times, a New York Times-inspired version of Hacker News

https://hackertimes.ca/
83•polpenn•2h ago•34 comments

DiscImageStudio: burn visible artwork onto CDs, DVDs and Blu-ray discs

https://github.com/JiaFeiMiao-K-Cat/DiscImageStudio
78•bpierre•2h ago•21 comments

Show HN: Subvocal – Talk to your computer without making noise

594•aarushyadav•10h ago•319 comments

Scaling Git at OpenAI

https://openai.com/index/scaling-git-at-openai/
84•makeramen•4h ago•26 comments

US boy names that became girl names and vice versa

https://namedaisy.com/blog/boy-names-that-became-girl-names
323•xoobdev•11h ago•326 comments

If you love a website, back it up

https://blog.mistys-internet.website/post/2026/10/29/if-you-love-a-website-back-it-up/
443•ingve•14h ago•100 comments

Launch HN: Momentic (YC W24) – Agents that catch bugs by using your app

https://momentic.ai/
133•wuweiweiwu•10h ago•88 comments

Resisting Cognitive Surrender

https://knlb.dev/essays/surrender
29•knlb•1d ago•3 comments

Show HN: Warsaw in voxels – An interactive 3D map of the city centre

https://p.migdal.pl/warsaw-vibe-voxel/
227•stared•11h ago•37 comments

Self-Employed? Solopreneur? NIST Has a Cybersecurity Guide Just for You

https://www.nist.gov/news-events/news/2026/11/self-employed-solopreneur-nist-has-cybersecurity-gu...
134•tomrod•10h ago•41 comments

Intel stock collapse worsens as $3.5T chip rout spreads

https://finance.yahoo.com/markets/article/the-intel-stock-collapse-is-getting-worse--and-the-37-t...
128•entryleveljobsc•3h ago•85 comments

SLAC researchers find proof of altermagnetism, a new magnetic phase

https://www6.slac.stanford.edu/news/2026-10-29-slac-researchers-find-proof-altermagnetism-new-mag...
43•gmays•6h ago•8 comments

Own Your HackerTube,an AI Curator Inspired by Karpathy's HackerTube

https://ownhackertube.cc/
3•RileyMorgan093•51m ago•0 comments

Ask HN: Who is hiring? (November 2026)

186•whoishiring•12h ago•150 comments

The SEC Should Block Anthropic's IPO to Protect the Public

https://www.techpolicy.press/the-sec-should-block-anthropics-ipo-to-protect-the-public/
247•cdrnsf•5h ago•182 comments

Show HN: Rustable is an open source database client built in Rust

https://rustable.app
4•JaTochNietDan•58m ago•1 comments

Open-Source 5G Ran Platforms: A Dual Perspective on Performance and Capabilities

https://arxiv.org/abs/2608.25820
5•teleforce•1h ago•0 comments

Egoless Mathematics in the AI Era

https://terrytao.wordpress.com/2026/11/02/egoless-mathematics-in-the-ai-era/
128•smilelamp•9h ago•92 comments

Trademarks and Symbols, Volume 2: Symbolical Designs (1973)

https://www.symbools.com/kuwayama-trademarks-symbols-vol-2/
11•NaOH•2d ago•4 comments

Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks

https://freenode.net/article/ubuntu-lts-kernels-still-unfixed-for-critical-cve-2026-98432
382•majorchord•9h ago•105 comments

Polyend releases the Tracker firmware source code

https://polyend.com/whats-up/tracker-the-biggest-update-yet/
99•austinallegro•10h ago•27 comments

WTF Ubuntu?

https://chalmovsky.com/posts/wtf-ubuntu
1376•chalmovsky•13h ago•595 comments

V100 SXM2 pinout and NVLink reference

https://github.com/pigeon-labs-stack/v100-sxm2-reference
17•airhangerf15•5h ago•2 comments

Bitmovin (YC S15) Is Hiring Technical Graduates in Denver (Engineering/CS Focus)

https://bitmovin.com/careers/8660599002/
1•slederer•11h ago

Sneaking into the auditorium for the Windows 2000 launch rehearsal

https://devblogs.microsoft.com/oldnewthing/20261102-00/?p=112818/
113•ibobev•9h ago•43 comments

Ask HN: Does anyone have a contact with Cleveland-area Ham club?

96•stockresearcher•3h ago•14 comments

Skill to Create Product Videos

https://github.com/aaitor/skill-video-studio
77•aaitor•9h ago•22 comments

WorkOS reports security breach

60•werrett•4h ago•7 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."