frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

The session you cannot take with you

https://earendil.com/posts/session-portability/
284•apitman•5h ago•60 comments

Google fixed more Chrome bugs in June than over the past two years, thanks to AI

https://blog.google/security/chrome-stronger-with-every-update/
22•Garbage•1h ago•25 comments

JEP 401: Value Objects (Preview) merged to OpenJDK master

https://github.com/openjdk/jdk/pull/31120
94•mfiguiere•4h ago•36 comments

DeepSeek-V4-Flash Update

https://api-docs.deepseek.com/updates/
207•dnhkng•2h ago•86 comments

Stacked PRs are now live on GitHub

https://github.blog/changelog/2026-07-30-stacked-pull-requests-are-now-in-public-preview/
632•tomzorz•16h ago•218 comments

Show HN: What should the GUI for AI agents look like?

https://marbleos.com/demo
46•akbabu•3h ago•27 comments

Show HN: Gander, an Android file viewer that asks for no permissions at all

https://github.com/mokshablr/gander
41•mokshablr•3h ago•17 comments

I flagged two research papers for fake authors and both were accepted as orals

https://geospatialml.com/posts/reviewing-ai-slop/
188•volumes94•10h ago•85 comments

Gemini Robotics 2 brings whole body intelligence to robots

https://deepmind.google/blog/gemini-robotics-2-brings-whole-body-intelligence-to-robots/
553•ai2027•17h ago•439 comments

The mean means nothing: data visualization to debug a latency problem

https://fzakaria.com/2026/07/27/the-mean-means-nothing
34•fanf2•1d ago•3 comments

Where USB Memory Sticks are Born (2013)

https://www.bunniestudios.com/blog/2013/where-usb-memory-sticks-are-born/
46•jacquesm•3d ago•3 comments

The Religion of Speed

https://graybeard.ing/the-religion-of-speed/
147•MobiusHorizons•9h ago•70 comments

Show HN: A udev implementation in Guile Scheme

https://codeberg.org/goodev/goodev
4•mbakke•3d ago•0 comments

Read this before you buy that TV streaming stick

https://krebsonsecurity.com/2026/07/read-this-before-you-buy-that-tv-streaming-stick/
702•speckx•15h ago•400 comments

Physicists Solve a Muon Mystery. Now, Old Results Don't Add Up

https://www.quantamagazine.org/physicists-solve-a-muon-mystery-now-old-results-dont-add-up-20260729/
216•ibobev•17h ago•131 comments

Simulating TCP loss and congestion in browser using Go/WASM

https://ccsim.fly.dev
16•dilyevsky•2d ago•0 comments

"the very foundation of modern academia has been blown to bits"

https://twitter.com/lemire/status/2082851447499088173
28•telotortium•6h ago•9 comments

The AI Aesthetic

https://blog.jim-nielsen.com/2026/ai-aesthetic/
300•montroser•9h ago•130 comments

The Economic Benefit of Refactoring

https://martinfowler.com/articles/exploring-gen-ai/refactoring-economic-benefit.html
233•javaeeeee•17h ago•99 comments

CodePen 2.0

https://chriscoyier.net/2026/07/30/codepen-2-0/
166•robin_reala•15h ago•47 comments

GCC steering committee announces AI policy

https://lwn.net/Articles/1086041/
291•arto•21h ago•316 comments

Bad Apple but It's Traceroute

https://jssfr.de/2026-07-27-bad-apple-but-traceroute.html
110•jssfr•3d ago•26 comments

Rune 1.1: adds Python, an Emacs editor, a symbol index and is now free

https://rune.build/blog/rune-1-1-release
80•ernestrc•11h ago•30 comments

The American Grilled Cheese Sandwich Essay (2024)

https://buttondown.com/theswordandthesandwich/archive/the-best-american-grilled-cheese-sandwich-e...
48•NaOH•3d ago•38 comments

Memo-1: A 6502 computer built from scratch, using a Minitel as its terminal

https://github.com/MemoireMorte/Memo-1
75•sciences44•2d ago•10 comments

UEFA and its national associations will not participate in FIFA competitions

https://www.uefa.com/news-media/news/02a7-213a92896eb0-54dfbf454e3b-1000--statement-on-behalf-of-...
1007•dickfickling•14h ago•544 comments

The lost civic life of movie rental stores

https://thereader.mitpress.mit.edu/the-lost-civic-life-of-movie-rental-stores/
165•facundo_olano•18h ago•216 comments

Show HN: Distilling DeepSeek into GPT-OSS doesn't transfer censorship. Try it

https://www.ctgt.ai/research/distillation-censorship-transfer
123•cgorlla•14h ago•64 comments

Saber-toothed cats became inbred–and struggled to move–before they went extinct

https://www.science.org/content/article/saber-toothed-cats-became-inbred-and-struggled-move-they-...
51•gmays•11h ago•23 comments

Why is everyone trying to build a solid-state battery?

https://www.construction-physics.com/p/why-is-everyone-trying-to-build-a
194•crescit_eundo•20h ago•240 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."