frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

I can't stop thinking about Papua New Guinea

https://notnottalmud.substack.com/p/why-i-cant-stop-thinking-about-papua
362•networked•6h ago•134 comments

Suspected sabotage causes major Netherlands rail disruption

https://www.bbc.com/news/articles/c8ly49w9g1edo
174•choult•1h ago•143 comments

Alternatives to MinIO for single-node local S3

https://rmoff.net/2026/01/14/alternatives-to-minio-for-single-node-local-s3/
65•rmoff•3h ago•38 comments

CSS-Tricks in Limbo

https://vale.rocks/micros/20260915-0135
60•edent•4h ago•7 comments

iOS 27, iPadOS 27, and macOS 27

https://www.apple.com/newsroom/2026/09/major-updates-for-apples-software-platforms-are-now-availa...
642•throw0101d•18h ago•735 comments

OpenArm: An open-source 7DOF humanoid arm

https://github.com/enactic/OpenArm
123•Lwrless•1d ago•21 comments

4,400-Year-Old Tomb of Egyptian Judge Found at Saqqara with Colors on Walls

https://arkeonews.net/4400-year-old-tomb-of-an-egyptian-judge-found-at-saqqara-with-colors-still-...
163•arunbahl•2d ago•53 comments

Pion, an agent designed to run any company autonomously

https://andonlabs.com/blog/why-we-built-pion
427•lukaspetersson•19h ago•529 comments

The k-server conjecture is true

https://arxiv.org/abs/2609.15979
29•iamsyr•4h ago•10 comments

A rough guide for going back to the Moon

https://research.ibm.com/blog/nasa-ibm-lunar-foundation-model
13•gmays•21h ago•2 comments

Linux from Scratch

https://www.linuxfromscratch.org/
234•sippingabonedry•8h ago•75 comments

XCancel service is suspended until further notice

https://xcancel.com/#
682•gaganyaan•1d ago•958 comments

Charts built for Chat

https://dbtcharts.com/blog/charts-built-for-chat/
248•thingsilearned•14h ago•78 comments

Lingo.dev (YC F24) is hiring a senior content engineer (Remote, worldwide)

https://lingo.dev/en/careers/ff88132a-cb79-4d35-a6a0-a6230de7a013
1•maxpr•5h ago

Show HN: Redis City – Explore how Redis works in an interactive 3D model

https://poltora.dev/redis
118•poltora•2d ago•20 comments

OpenAI bots knew about the RubyGems caching vulnerability

https://tenderlovemaking.com/2026/09/11/what-a-time-to-be-alive/
475•gregnavis•23h ago•385 comments

Dropping eBPF CPU Cost by About 90% with Memoization (Not AI Gen)

https://nathannaveen.dev/posts/dropping-ebpf-cpu-cost-by-90/
133•nathannaveen•21h ago•28 comments

A beginning for mathematics

https://www.daniellitt.com/blog/2026/9/13/a-beginning-for-mathematics/
242•robinhouston•20h ago•128 comments

Distributed Systems Classics (2017)

https://nvartolomei.com/dist-sys-classics/
321•grep_it•20h ago•68 comments

Compressing a flag to 11 bits

https://read.vantezzen.io/miniflags
162•bennett_dev•2d ago•62 comments

High-performance garbage collection for C++

https://v8.dev/blog/high-performance-cpp-gc
56•motownphilly•1d ago•12 comments

There are only twelve 4x4 sudokus (and a cool trick for finding minimal subsets)

https://baldino.dev/blog/there-are-only-twelve-4x4-sudokus/
8•Fran314•1d ago•5 comments

Forgotten Woodlands

https://storymaps.arcgis.com/stories/9b790daf22ba4e87836f467abb1c7e49
74•NaOH•3d ago•25 comments

Ubuntu 26.10 completes transition to Rust-based coreutils

https://www.omgubuntu.co.uk/2026/09/ubuntu-2610-rust-coreutils-complete
220•theanonymousone•22h ago•234 comments

Ask HN: What are you working on? (September 2026)

342•david927•1d ago•1059 comments

Principles for Fast Tokio Applications

https://dial9-rs.github.io/blog/principles-for-fast-tokio-applications/
226•carllerche•20h ago•53 comments

25 Years of Mass Surveillance Is Enough

https://www.schneier.com/blog/archives/2026/09/25-years-of-mass-surveillance-is-enough.html
10•iamnothere•51m ago•2 comments

People who can't picture anything are rewriting the science of imagination

https://dailyneuron.com/aphantasia-mental-imagery-brain-network/
186•giuliomagnifico•22h ago•261 comments

Show HN: Macros with a Behringer FCB1010 MIDI Pedalboard in macOS

https://github.com/JamesRyanATX/fcbnerd
78•fretlessjazz•13h ago•19 comments

Let's make quality the norm again

https://www.forbrukerradet.no/short-life/
90•ingve•2h ago•101 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."