frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Voyager 1 is about to reach one light-day from earth

https://scienceclock.com/voyager-1-is-about-to-reach-one-light-day-from-earth/
574•ashishgupta2209•7h ago•195 comments

S&box is now an open source game engine

https://sbox.game/news/update-25-11-26
44•MaximilianEmel•1h ago•14 comments

A Fast 64-Bit Date Algorithm (30–40% faster by counting dates backwards)

https://www.benjoffe.com/fast-date-64
176•benjoffe•3d ago•33 comments

Gemini CLI Tips and Tricks for Agentic Coding

https://github.com/addyosmani/gemini-cli-tips
85•ayoisaiah•2h ago•32 comments

Crews Claim Boring Company Failed to Pay Workers and Snubbed OSHA Concerns

https://nashvillebanner.com/2025/11/25/boring-company-nashville-shane-trucking-and-excavating/
50•breve•50m ago•8 comments

A Woman on a Mission to Photograph Every Species of Hummingbird

https://www.audubon.org/magazine/meet-woman-mission-photograph-every-species-of-hummingbird-world
58•zeech•4d ago•9 comments

The most male and female reasons to end up hospital

https://leobenedictus.substack.com/p/the-most-male-and-female-reasons
43•speckx•1h ago•22 comments

A cell so minimal that it challenges definitions of life

https://www.quantamagazine.org/a-cell-so-minimal-that-it-challenges-definitions-of-life-20251124/
210•ibobev•10h ago•89 comments

An Homage to 90s –/Public_HTML Hosting

https://public.monster/
25•gpi•6d ago•13 comments

Show HN: I turned algae into a bio-altimeter and put it on a weather balloon

https://radi8.dev/blog/stratospore/
68•radeeyate•4d ago•8 comments

Statistical Process Control in Python

https://timothyfraser.com/sigma/statistical-process-control-in-python.html
175•lifeisstillgood•12h ago•54 comments

DRAM prices are spiking, but I don't trust the industry's why

https://www.xda-developers.com/dram-prices-spiking-dont-trust-industry-reasons/
115•binarycrusader•3h ago•63 comments

Optery (YC W22) Hiring CISO, Release Manager, Tech Lead (Node), Full Stack Eng

https://www.optery.com/careers/
1•beyondd•4h ago

JOPA: Java compiler in C++, Jikes modernized to Java 6 with Claude

https://github.com/7mind/jopa
41•pshirshov•3d ago•36 comments

China Has Three Reusable Rockets Ready for Their Debut Flights

https://www.china-in-space.com/p/china-has-three-reusable-rockets
43•speckx•2h ago•24 comments

Show HN: KiDoom – Running DOOM on PCB Traces

https://www.mikeayles.com/#kidoom
307•mikeayles•22h ago•43 comments

OpenAI needs to raise at least $207B by 2030

https://ft.com/content/23e54a28-6f63-4533-ab96-3756d9c88bad
487•akira_067•5h ago•439 comments

Copyparty, the FOSS file server [video]

https://www.youtube.com/watch?v=15_-hgsX2V0
217•franczesko•1w ago•53 comments

Show HN: Safe-NPM – only install packages that are +90 days old

https://github.com/kevinslin/safe-npm
3•kevinslin•2d ago•0 comments

Surprisingly, Emacs on Android is pretty good

https://kristofferbalintona.me/posts/202505291438/
220•harryday•3d ago•108 comments

From blood sugar to brain relief: GLP-1 therapy slashes migraine frequency

https://www.medlink.com/news/from-blood-sugar-to-brain-relief-glp-1-therapy-slashes-migraine-freq...
85•Anon84•5h ago•55 comments

Image Diffusion Models Exhibit Emergent Temporal Propagation in Videos

https://arxiv.org/abs/2511.19936
98•50kIters•13h ago•13 comments

Slop Detective – Fight the Slop Syndicate

https://slopdetective.kagi.com/
50•speckx•4h ago•22 comments

Jakarta is now the biggest city in the world

https://www.axios.com/2025/11/24/jakarta-tokyo-worlds-biggest-city-population
435•skx001•1d ago•325 comments

Qiskit open-source SDK for working with quantum computers

https://github.com/Qiskit/qiskit
32•thinkingemote•8h ago•2 comments

Show HN: We built an open source, zero webhooks payment processor

https://github.com/flowglad/flowglad
365•agreeahmed•1d ago•204 comments

CS234: Reinforcement Learning Winter 2025

https://web.stanford.edu/class/cs234/
179•jonbaer•20h ago•51 comments

How to repurpose your old phone into a web server

https://far.computer/how-to/
317•louismerlin•4d ago•110 comments

A new bridge links the math of infinity to computer science

https://www.quantamagazine.org/a-new-bridge-links-the-strange-math-of-infinity-to-computer-scienc...
232•digital55•1d ago•134 comments

1,700-year-old Roman sarcophagus is unearthed in Budapest

https://apnews.com/article/hungary-roman-sarcophagus-discovery-budapest-77a41fe190bbcc167b43d0514...
141•gmays•1d ago•75 comments
Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•6mo ago

Comments

steele•6mo ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•6mo ago
Lmao, gentrify cracked me up
neilv•6mo ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•6mo ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•6mo ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•6mo ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•6mo ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•6mo ago
May as well just release an executable tbh.
theamk•6mo ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•6mo ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•6mo ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."